{"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"}
{"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"error","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"}
{"level":"error","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"}
{"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56606432-86b0-4d34-87f0-6ff748d86026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44834","PortSpecifier":{"PortValue":44834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56606432-86b0-4d34-87f0-6ff748d86026","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56606432-86b0-4d34-87f0-6ff748d86026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44834","PortSpecifier":{"PortValue":44834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383713,"nanos":123399574},"http":{"id":"56606432-86b0-4d34-87f0-6ff748d86026","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56606432-86b0-4d34-87f0-6ff748d86026","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56606432-86b0-4d34-87f0-6ff748d86026","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56606432-86b0-4d34-87f0-6ff748d86026","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56606432-86b0-4d34-87f0-6ff748d86026","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56606432-86b0-4d34-87f0-6ff748d86026","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34860","PortSpecifier":{"PortValue":34860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34860","PortSpecifier":{"PortValue":34860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383713,"nanos":164580295},"http":{"id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c8cf6a1-94b0-47c4-9dd5-93395a4ff977","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44846","PortSpecifier":{"PortValue":44846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44846","PortSpecifier":{"PortValue":44846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383713,"nanos":200985682},"http":{"id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz\"}"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","subscription":"e2e-rate-iso-a-35e6ed","tenant":"e2e-shared-a-72e474","userId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-35e6ed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-35e6ed"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","selected_subscription":"e2e-rate-iso-a-35e6ed","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-35e6ed@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"949a8db8-53fd-4df1-97e8-293dcc4c674f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44848","PortSpecifier":{"PortValue":44848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44848","PortSpecifier":{"PortValue":44848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383714,"nanos":261987441},"http":{"id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz"}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz\"}"}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","subscription":"e2e-rate-iso-a-35e6ed","tenant":"e2e-shared-a-72e474","userId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-35e6ed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-35e6ed"}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","selected_subscription":"e2e-rate-iso-a-35e6ed","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-35e6ed@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed5eaa6-12aa-4388-ae4a-7f3a1d3adf24","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44858","PortSpecifier":{"PortValue":44858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44858","PortSpecifier":{"PortValue":44858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383715,"nanos":294762275},"http":{"id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz"}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o8vQ9p1NH7jnREs6_wBULpOCGq7n8VfJR9SvFV5l1Tw2Zns5z2mgBEggtEnz\"}"}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","subscription":"e2e-rate-iso-a-35e6ed","tenant":"e2e-shared-a-72e474","userId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-35e6ed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-35e6ed"}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edec6dd-942e-450b-a5db-b16c70ebd8e1","keyName":"e2e-rate-a-35e6ed","selected_subscription":"e2e-rate-iso-a-35e6ed","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-35e6ed@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35e6ed","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49d5d6ac-9192-4da9-9bca-b1c1890f6d06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49920","PortSpecifier":{"PortValue":49920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49920","PortSpecifier":{"PortValue":49920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383726,"nanos":124749599},"http":{"id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deed16ba-21f8-4ce3-a5a6-2cdaab6d577b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48278","PortSpecifier":{"PortValue":48278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48278","PortSpecifier":{"PortValue":48278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383726,"nanos":187413858},"http":{"id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"]}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a1119c978fe1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4f2fa969-506f-451f-b0ba-eb41c46caacc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"414ca404-d9d5-4bf9-81a4-8f7724f45db2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37cc7bc8-5b34-4ca0-8368-7c8a5be49d10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49934","PortSpecifier":{"PortValue":49934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49934","PortSpecifier":{"PortValue":49934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383726,"nanos":219730042},"http":{"id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx\"}"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","subscription":"e2e-rate-iso-a-29b497","tenant":"e2e-shared-a-72e474","userId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-29b497\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29b497"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","selected_subscription":"e2e-rate-iso-a-29b497","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-29b497@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5c8b2a9-c8a1-4b41-92ae-167a8a998fc3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49942","PortSpecifier":{"PortValue":49942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49942","PortSpecifier":{"PortValue":49942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383727,"nanos":263844279},"http":{"id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx"}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx\"}"}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","subscription":"e2e-rate-iso-a-29b497","tenant":"e2e-shared-a-72e474","userId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-29b497\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29b497"}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","selected_subscription":"e2e-rate-iso-a-29b497","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-29b497@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b66ddbbb-eb9d-4687-9c81-b9d31bb3d881","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49946","PortSpecifier":{"PortValue":49946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","method":"POST","path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions","host":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49946","PortSpecifier":{"PortValue":49946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383728,"nanos":303361758},"http":{"id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","method":"POST","headers":{":authority":"e2e-shared-a-72e474.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Uk8sPBViPdb68B3Y_7plvn1bt6U7jInpnFAxs8495LWqKl38O9mbcPYZtGsx\"}"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","subscription":"e2e-rate-iso-a-29b497","tenant":"e2e-shared-a-72e474","userId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\",\"requestedSubscription\":\"e2e-rate-iso-a-29b497\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-72e474.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29b497"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ecf607ec-79fe-40ef-932a-0fd9d2f0b62b","keyName":"e2e-rate-a-29b497","selected_subscription":"e2e-rate-iso-a-29b497","selected_subscription_key":"ai-tenant-e2e-shared-a-72e474/e2e-rate-iso-a-29b497@ai-tenant-e2e-shared-a-72e474/rate-test-model-72e474","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-72e474","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29b497","namespace":"ai-tenant-e2e-shared-a-72e474","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3eec048-c39f-4d6d-a79f-eca11ed8daee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48286","PortSpecifier":{"PortValue":48286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","method":"POST","path":"/ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658/v1/completions","host":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48286","PortSpecifier":{"PortValue":48286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383728,"nanos":342112609},"http":{"id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","method":"POST","headers":{":authority":"e2e-shared-b-1ea658.apps.c0223d3f-1f8d-4bfa-9842-a1119c978fe1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zZyAwbittfc3d7G7_4Uyni1oX3pp3GcWC6efH9YtI1ckhTMVehggiP247Vrs"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zZyAwbittfc3d7G7_4Uyni1oX3pp3GcWC6efH9YtI1ckhTMVehggiP247Vrs\"}"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8774c020-3a2d-45db-b2d7-0c019ea260fe","keyName":"e2e-rate-b-29b497","subscription":"e2e-rate-iso-b-29b497","tenant":"e2e-shared-b-1ea658","userId":"8774c020-3a2d-45db-b2d7-0c019ea260fe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658\",\"requestedSubscription\":\"e2e-rate-iso-b-29b497\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1ea658.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1ea658","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-29b497","namespace":"ai-tenant-e2e-shared-b-1ea658","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-29b497"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8774c020-3a2d-45db-b2d7-0c019ea260fe","keyName":"e2e-rate-b-29b497","selected_subscription":"e2e-rate-iso-b-29b497","selected_subscription_key":"ai-tenant-e2e-shared-b-1ea658/e2e-rate-iso-b-29b497@ai-tenant-e2e-shared-b-1ea658/rate-test-model-1ea658","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1ea658","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-29b497","namespace":"ai-tenant-e2e-shared-b-1ea658","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7366161-21f6-45e1-8c3e-58afe44d3dba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efffae8c2d08036454637df845f016c122a17207c107664b5e5eebc8b03617dd"}
{"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69317f28af620d6e89eafda2df4d55f0b683ef9259a51845e6633ac935a992a"}
{"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd947a5a7dd501fc3e1a1236c4b69b03ec9b99c0f62a1e4b49775bf115951cc7"}
{"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ffce0b6076caaedd325f11ab97ba0392afbfcd6287a286db7a987563a521b40"}
{"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ece66c32af08c09dfb4450f45400414939a26bdcdbaa548a923f52a96ded79c"}
{"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7f1387a493eafea65bd92099948d36c09a12f7286a432490fe65b0184efa13a"}
{"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fca932e54da765503e502380180ef0dbf915e3e055264b1629ac7c8c6ac37adc"}
{"level":"info","ts":"2026-07-07T00:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68a81f29172b72cbefc88fea7a55d11b5b358a10b3d2221b339db4cc6bf4c1c3"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/222170fd6d0f29528c0b8ab61a8d32919b28e905ec4a1407e1519067539d78af"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f612f2a109d769d620529c6d39777ebf92e4d70e0f02074842fe70e88c2eb5c"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b40a07528f6467e9d19876dc464df352fad5d5edc802542c6330a6ef35fa3f4"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c98f72242254c7aa455fb71ea7dff3a0f0730f9a6681e26f426058fbdf8bdf58"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92c930044032469becfdffb4ef2729fa2bc812f3e43e1b106a5c885b2605b190"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c343fda4b3bd236ba389e955310dcf309d859dce930c343b8b9d8940060433d"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae3bb8a507965b03acaef948b5e5b284a0de9d2619e85c393ba5aa2b98a019fb"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1a00ca850c28f3fbd97d1518658324b26d3342ee91f1a6465996df97d49f3cc"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bac911cdf8391a3f0e62a6237c1852da90b602d455991804d17f3484000ec47e"}
{"level":"info","ts":"2026-07-07T00:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/722baadec60ba212cff849102cdeb31e884d9ae7368732f702813d28458b60d3"}
{"level":"info","ts":"2026-07-07T00:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/070b2970c4453aacd6a4ca8cca97e881c49a2b171afe40c830e315e6d5a8c02c"}
{"level":"info","ts":"2026-07-07T00:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f672c0e43869c20305d9da753e4c05bb90a4f67cce2e2156e93e96e915169b6"}