{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M6vUBua0FtvdaYA6_9OsmohNA5yvbdZ8REgI3Kr5umRCgU9kDmW6SBnng9ak"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1M6vUBua0FtvdaYA6_9OsmohNA5yvbdZ8REgI3Kr5umRCgU9kDmW6SBnng9ak\"}"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c472797b-ff2f-4fdf-af2e-1cd258f99e80","keyName":"e2e-sub-iso-979002","subscription":"e2e-shared-sub-d977f6","tenant":"e2e-shared-a-15ce38","userId":"c472797b-ff2f-4fdf-af2e-1cd258f99e80","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-15ce38/sub-test-model-15ce38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-15ce38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d977f6"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68f96afc-4d0e-49cd-afe7-d3da4d41e1f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47228","PortSpecifier":{"PortValue":47228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47228","PortSpecifier":{"PortValue":47228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727570,"nanos":858977611},"http":{"id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","method":"POST","headers":{":authority":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18Vc1Yqh7bC6FRJ8N_qJCmgsMDobwpyiVmsCEJypkY9WPE9FThFDrRUl8jWnj"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-19e216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18Vc1Yqh7bC6FRJ8N_qJCmgsMDobwpyiVmsCEJypkY9WPE9FThFDrRUl8jWnj\"}"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-19e216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee1f9945-d448-4986-8f71-f0910b4c151a","keyName":"e2e-sub-iso-e3e3cc","subscription":"e2e-shared-sub-d977f6","tenant":"e2e-shared-b-19e216","userId":"ee1f9945-d448-4986-8f71-f0910b4c151a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19e216/sub-test-model-19e216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19e216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d977f6"}
{"level":"info","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2431215-acb9-4618-a5d4-2c0951d0fe70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9196e183e76cd2a4fe88c8129b312a150083a558703c5e2d94f8ee05312a7827"}
{"level":"info","ts":"2026-07-22T13:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7626bb8109aaad8ff924ef9bc8a9e5a321bb2372151cfb45275603ea8d8d5969"}
{"level":"info","ts":"2026-07-22T13:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71e8a3801f2842bcc21c4fec27897c0f2487c702e3c2e2b030412fd58256810a"}
{"level":"info","ts":"2026-07-22T13:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc70588dc24ebfeaa1d8c813ca7a1b02a9b38be518a7619356b9a343b0669049"}
{"level":"info","ts":"2026-07-22T13:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588"}
{"level":"info","ts":"2026-07-22T13:39:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4838e390581d9ef2518fb5bc1cff93be998bc2b87c25f061b30f6a42bd4d6bab"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2ba067ab0cc111387cbb0b940f4196e863488481e62ca30985cdf41cc5576d6"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64796b4d584d7044d4786142c612abcd8b01af8d5d348e1d1299089145abcf24"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ec4288466fccfe098450faa1f194b388771dca706af2ff6e5a631691573a939"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867658aff23c096834a215c7dea2e46250fe6a7d42473e2c64b638188e60cbc0"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dca898a93f556ad20281755c87a1fab5c6327695dd660952b619c4e366198e67"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61b3904ee128bc5878143e0543306ff326608fddcd5ea0e9567e444d4061622f"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54ec5076e24b314d15c45f61ba9dbe0a7f3f60dc3b75703d4a76e1e59b7107bd"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80ccd379b1cd014c1085103e552889b2dda650a25fb0afca5d41718482ff00a6"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f748125bde13999c84f61fbf7aa766f59dca38c5dd3fbd23163d65b31d0e304c"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25121fef84f81aef042af39e85b6929fd78757a29e9fac1b4ddd45638e527406"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/485d1beb4a47e1e5f6cfac11642d19aee6b0b707cc4f54271248cbc96e362dc3"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7fae9d12b12253927ede2435c611f6e56cad98f3f2e330728ada406a3271cf1"}
{"level":"info","ts":"2026-07-22T13:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5848d7b1f75e530be69c7342c69bb00f854efdd80f86ba0d16eecc83f84bf0a1"}
{"level":"debug","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b"}
{"level":"debug","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b"}
{"level":"debug","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255"}
{"level":"error","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf"}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b1288610a9e940b44924e8303b2330d34058cb256f6240353cd08b5751cad1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b1288610a9e940b44924e8303b2330d34058cb256f6240353cd08b5751cad1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11b1288610a9e940b44924e8303b2330d34058cb256f6240353cd08b5751cad1"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b1288610a9e940b44924e8303b2330d34058cb256f6240353cd08b5751cad1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11b1288610a9e940b44924e8303b2330d34058cb256f6240353cd08b5751cad1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b1288610a9e940b44924e8303b2330d34058cb256f6240353cd08b5751cad1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11b1288610a9e940b44924e8303b2330d34058cb256f6240353cd08b5751cad1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11b1288610a9e940b44924e8303b2330d34058cb256f6240353cd08b5751cad1"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448"}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecab40cc698ae5468d543a7c48f955a8f1a3dcdc2ab1d228bd9f5ea8b8987ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecab40cc698ae5468d543a7c48f955a8f1a3dcdc2ab1d228bd9f5ea8b8987ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0ea79f2a7895eba61dde9ad3425b39352f6bb537d0c7a75c1f5b615015c957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecab40cc698ae5468d543a7c48f955a8f1a3dcdc2ab1d228bd9f5ea8b8987ba"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0ea79f2a7895eba61dde9ad3425b39352f6bb537d0c7a75c1f5b615015c957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecab40cc698ae5468d543a7c48f955a8f1a3dcdc2ab1d228bd9f5ea8b8987ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ecab40cc698ae5468d543a7c48f955a8f1a3dcdc2ab1d228bd9f5ea8b8987ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecab40cc698ae5468d543a7c48f955a8f1a3dcdc2ab1d228bd9f5ea8b8987ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0ea79f2a7895eba61dde9ad3425b39352f6bb537d0c7a75c1f5b615015c957"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b"}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fbf43a5ebb6b922ed348336dcb5a395b7660cc12c044786a3632b8ff6cf4394"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fbf43a5ebb6b922ed348336dcb5a395b7660cc12c044786a3632b8ff6cf4394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fbf43a5ebb6b922ed348336dcb5a395b7660cc12c044786a3632b8ff6cf4394"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e8a3801f2842bcc21c4fec27897c0f2487c702e3c2e2b030412fd58256810a"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fbf43a5ebb6b922ed348336dcb5a395b7660cc12c044786a3632b8ff6cf4394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0ea79f2a7895eba61dde9ad3425b39352f6bb537d0c7a75c1f5b615015c957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0ea79f2a7895eba61dde9ad3425b39352f6bb537d0c7a75c1f5b615015c957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af50e4cce54cf663f46cb386270b3abbeb688994b15e02554154d71e80dfc709"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecab40cc698ae5468d543a7c48f955a8f1a3dcdc2ab1d228bd9f5ea8b8987ba"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0ea79f2a7895eba61dde9ad3425b39352f6bb537d0c7a75c1f5b615015c957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e8a3801f2842bcc21c4fec27897c0f2487c702e3c2e2b030412fd58256810a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e8a3801f2842bcc21c4fec27897c0f2487c702e3c2e2b030412fd58256810a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10975164b6865950cadc0178ff3e6e3b1370721df12618ff12c4a497d514d758"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dca898a93f556ad20281755c87a1fab5c6327695dd660952b619c4e366198e67"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e8a3801f2842bcc21c4fec27897c0f2487c702e3c2e2b030412fd58256810a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af50e4cce54cf663f46cb386270b3abbeb688994b15e02554154d71e80dfc709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af50e4cce54cf663f46cb386270b3abbeb688994b15e02554154d71e80dfc709"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff857c894d07767896c5349983b8430ace8c3b581804402efba328fdb3531b9"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfece540247d7f3174cb5e371ed8bd9cfbc30f93463fad4e2f4db33e060a7bb"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af50e4cce54cf663f46cb386270b3abbeb688994b15e02554154d71e80dfc709","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ecab40cc698ae5468d543a7c48f955a8f1a3dcdc2ab1d228bd9f5ea8b8987ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10975164b6865950cadc0178ff3e6e3b1370721df12618ff12c4a497d514d758","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10975164b6865950cadc0178ff3e6e3b1370721df12618ff12c4a497d514d758"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fbf43a5ebb6b922ed348336dcb5a395b7660cc12c044786a3632b8ff6cf4394"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0ea79f2a7895eba61dde9ad3425b39352f6bb537d0c7a75c1f5b615015c957"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e8a3801f2842bcc21c4fec27897c0f2487c702e3c2e2b030412fd58256810a"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10975164b6865950cadc0178ff3e6e3b1370721df12618ff12c4a497d514d758","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dca898a93f556ad20281755c87a1fab5c6327695dd660952b619c4e366198e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dca898a93f556ad20281755c87a1fab5c6327695dd660952b619c4e366198e67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af50e4cce54cf663f46cb386270b3abbeb688994b15e02554154d71e80dfc709"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dca898a93f556ad20281755c87a1fab5c6327695dd660952b619c4e366198e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff857c894d07767896c5349983b8430ace8c3b581804402efba328fdb3531b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ff857c894d07767896c5349983b8430ace8c3b581804402efba328fdb3531b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10975164b6865950cadc0178ff3e6e3b1370721df12618ff12c4a497d514d758"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dca898a93f556ad20281755c87a1fab5c6327695dd660952b619c4e366198e67"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff857c894d07767896c5349983b8430ace8c3b581804402efba328fdb3531b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dfece540247d7f3174cb5e371ed8bd9cfbc30f93463fad4e2f4db33e060a7bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dfece540247d7f3174cb5e371ed8bd9cfbc30f93463fad4e2f4db33e060a7bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff857c894d07767896c5349983b8430ace8c3b581804402efba328fdb3531b9"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dfece540247d7f3174cb5e371ed8bd9cfbc30f93463fad4e2f4db33e060a7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfece540247d7f3174cb5e371ed8bd9cfbc30f93463fad4e2f4db33e060a7bb"}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fbf43a5ebb6b922ed348336dcb5a395b7660cc12c044786a3632b8ff6cf4394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0ea79f2a7895eba61dde9ad3425b39352f6bb537d0c7a75c1f5b615015c957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e8a3801f2842bcc21c4fec27897c0f2487c702e3c2e2b030412fd58256810a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af50e4cce54cf663f46cb386270b3abbeb688994b15e02554154d71e80dfc709","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10975164b6865950cadc0178ff3e6e3b1370721df12618ff12c4a497d514d758","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dca898a93f556ad20281755c87a1fab5c6327695dd660952b619c4e366198e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff857c894d07767896c5349983b8430ace8c3b581804402efba328fdb3531b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dfece540247d7f3174cb5e371ed8bd9cfbc30f93463fad4e2f4db33e060a7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6"}
{"level":"info","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57baa197-47a4-4385-bf94-b692241e1d33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48242","PortSpecifier":{"PortValue":48242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57baa197-47a4-4385-bf94-b692241e1d33","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57baa197-47a4-4385-bf94-b692241e1d33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48242","PortSpecifier":{"PortValue":48242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727629,"nanos":816883448},"http":{"id":"57baa197-47a4-4385-bf94-b692241e1d33","method":"POST","headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57baa197-47a4-4385-bf94-b692241e1d33","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57baa197-47a4-4385-bf94-b692241e1d33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"caa937fe-e2ef-4694-a51c-d9f906fd3102","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c8dedd3a-70ef-426e-81aa-004b4ff27235"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c65039c169e"]}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57baa197-47a4-4385-bf94-b692241e1d33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c65039c169e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c8dedd3a-70ef-426e-81aa-004b4ff27235"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"caa937fe-e2ef-4694-a51c-d9f906fd3102","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57baa197-47a4-4385-bf94-b692241e1d33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57baa197-47a4-4385-bf94-b692241e1d33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57baa197-47a4-4385-bf94-b692241e1d33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-15ce38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57baa197-47a4-4385-bf94-b692241e1d33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57baa197-47a4-4385-bf94-b692241e1d33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57baa197-47a4-4385-bf94-b692241e1d33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57baa197-47a4-4385-bf94-b692241e1d33","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57baa197-47a4-4385-bf94-b692241e1d33","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d720662-a202-41ad-939c-45122797d3c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39832","PortSpecifier":{"PortValue":39832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d720662-a202-41ad-939c-45122797d3c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d720662-a202-41ad-939c-45122797d3c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39832","PortSpecifier":{"PortValue":39832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727629,"nanos":859499563},"http":{"id":"6d720662-a202-41ad-939c-45122797d3c5","method":"POST","headers":{":authority":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d720662-a202-41ad-939c-45122797d3c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d720662-a202-41ad-939c-45122797d3c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"caa937fe-e2ef-4694-a51c-d9f906fd3102","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c8dedd3a-70ef-426e-81aa-004b4ff27235"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c65039c169e"]}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d720662-a202-41ad-939c-45122797d3c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c65039c169e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c8dedd3a-70ef-426e-81aa-004b4ff27235"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"caa937fe-e2ef-4694-a51c-d9f906fd3102","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d720662-a202-41ad-939c-45122797d3c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d720662-a202-41ad-939c-45122797d3c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d720662-a202-41ad-939c-45122797d3c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19e216/rate-test-model-19e216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19e216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d720662-a202-41ad-939c-45122797d3c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d720662-a202-41ad-939c-45122797d3c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d720662-a202-41ad-939c-45122797d3c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d720662-a202-41ad-939c-45122797d3c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d720662-a202-41ad-939c-45122797d3c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48244","PortSpecifier":{"PortValue":48244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","method":"POST","path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions","host":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48244","PortSpecifier":{"PortValue":48244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727629,"nanos":899215777},"http":{"id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","method":"POST","headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tPk4rkDbS4Yo7Rdm_YY8G0JI1LDnJjdcyJwfsuUFiia6DEvh1T1PqBrWlO3M"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tPk4rkDbS4Yo7Rdm_YY8G0JI1LDnJjdcyJwfsuUFiia6DEvh1T1PqBrWlO3M\"}"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e631a295-b67f-4d5b-9bc8-e737b0c8ec8a","keyName":"e2e-rate-a-e431ce","subscription":"e2e-rate-iso-a-e431ce","tenant":"e2e-shared-a-15ce38","userId":"e631a295-b67f-4d5b-9bc8-e737b0c8ec8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\",\"requestedSubscription\":\"e2e-rate-iso-a-e431ce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e431ce","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-15ce38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e431ce"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e631a295-b67f-4d5b-9bc8-e737b0c8ec8a","keyName":"e2e-rate-a-e431ce","selected_subscription":"e2e-rate-iso-a-e431ce","selected_subscription_key":"ai-tenant-e2e-shared-a-15ce38/e2e-rate-iso-a-e431ce@ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e431ce","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef421f4-32d7-44f7-b03e-fd938e34735f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48258","PortSpecifier":{"PortValue":48258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","method":"POST","path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions","host":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48258","PortSpecifier":{"PortValue":48258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727630,"nanos":984595860},"http":{"id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","method":"POST","headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tPk4rkDbS4Yo7Rdm_YY8G0JI1LDnJjdcyJwfsuUFiia6DEvh1T1PqBrWlO3M"}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tPk4rkDbS4Yo7Rdm_YY8G0JI1LDnJjdcyJwfsuUFiia6DEvh1T1PqBrWlO3M\"}"}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e631a295-b67f-4d5b-9bc8-e737b0c8ec8a","keyName":"e2e-rate-a-e431ce","subscription":"e2e-rate-iso-a-e431ce","tenant":"e2e-shared-a-15ce38","userId":"e631a295-b67f-4d5b-9bc8-e737b0c8ec8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\",\"requestedSubscription\":\"e2e-rate-iso-a-e431ce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e431ce","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"}}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-15ce38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e431ce"}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e631a295-b67f-4d5b-9bc8-e737b0c8ec8a","keyName":"e2e-rate-a-e431ce","selected_subscription":"e2e-rate-iso-a-e431ce","selected_subscription_key":"ai-tenant-e2e-shared-a-15ce38/e2e-rate-iso-a-e431ce@ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e431ce","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f27c6cd-e8c1-4fc7-9679-771b63ac759b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48264","PortSpecifier":{"PortValue":48264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","method":"POST","path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions","host":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48264","PortSpecifier":{"PortValue":48264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727632,"nanos":27092194},"http":{"id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","method":"POST","headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tPk4rkDbS4Yo7Rdm_YY8G0JI1LDnJjdcyJwfsuUFiia6DEvh1T1PqBrWlO3M"}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tPk4rkDbS4Yo7Rdm_YY8G0JI1LDnJjdcyJwfsuUFiia6DEvh1T1PqBrWlO3M\"}"}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e631a295-b67f-4d5b-9bc8-e737b0c8ec8a","keyName":"e2e-rate-a-e431ce","subscription":"e2e-rate-iso-a-e431ce","tenant":"e2e-shared-a-15ce38","userId":"e631a295-b67f-4d5b-9bc8-e737b0c8ec8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\",\"requestedSubscription\":\"e2e-rate-iso-a-e431ce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e431ce","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"}}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-15ce38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e431ce"}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e631a295-b67f-4d5b-9bc8-e737b0c8ec8a","keyName":"e2e-rate-a-e431ce","selected_subscription":"e2e-rate-iso-a-e431ce","selected_subscription_key":"ai-tenant-e2e-shared-a-15ce38/e2e-rate-iso-a-e431ce@ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e431ce","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e8e1f8c-c798-4cc5-86e7-4bfd2981877b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44034","PortSpecifier":{"PortValue":44034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44034","PortSpecifier":{"PortValue":44034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727645,"nanos":100497032},"http":{"id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","method":"POST","headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"caa937fe-e2ef-4694-a51c-d9f906fd3102","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c8dedd3a-70ef-426e-81aa-004b4ff27235"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c65039c169e"]}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c65039c169e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c8dedd3a-70ef-426e-81aa-004b4ff27235"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"caa937fe-e2ef-4694-a51c-d9f906fd3102","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-15ce38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03cbcfdd-2d21-4d8c-9f76-9e4c941c6346","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41968","PortSpecifier":{"PortValue":41968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41968","PortSpecifier":{"PortValue":41968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727645,"nanos":144814283},"http":{"id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","method":"POST","headers":{":authority":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"caa937fe-e2ef-4694-a51c-d9f906fd3102","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c8dedd3a-70ef-426e-81aa-004b4ff27235"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c65039c169e"]}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c65039c169e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c8dedd3a-70ef-426e-81aa-004b4ff27235"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"caa937fe-e2ef-4694-a51c-d9f906fd3102","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19e216/rate-test-model-19e216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19e216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6395903e-7b85-4e24-8535-c7c6ff57aa67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44036","PortSpecifier":{"PortValue":44036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","method":"POST","path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions","host":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44036","PortSpecifier":{"PortValue":44036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727645,"nanos":183354926},"http":{"id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","method":"POST","headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JXp2MkVhJdCugWFF_VKHOX1toKkykjqMolkKVTsUGFzRJI3s9Kmn70XZbYWG"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JXp2MkVhJdCugWFF_VKHOX1toKkykjqMolkKVTsUGFzRJI3s9Kmn70XZbYWG\"}"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c0c5fb42-8f9f-4ccf-a7a3-9662de48f8db","keyName":"e2e-rate-a-1a46d9","subscription":"e2e-rate-iso-a-1a46d9","tenant":"e2e-shared-a-15ce38","userId":"c0c5fb42-8f9f-4ccf-a7a3-9662de48f8db","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\",\"requestedSubscription\":\"e2e-rate-iso-a-1a46d9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a46d9","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-15ce38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a46d9"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c0c5fb42-8f9f-4ccf-a7a3-9662de48f8db","keyName":"e2e-rate-a-1a46d9","selected_subscription":"e2e-rate-iso-a-1a46d9","selected_subscription_key":"ai-tenant-e2e-shared-a-15ce38/e2e-rate-iso-a-1a46d9@ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a46d9","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12fca59b-1931-4bc3-b3c1-6b08f6cc9087","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44050","PortSpecifier":{"PortValue":44050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","method":"POST","path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions","host":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44050","PortSpecifier":{"PortValue":44050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727646,"nanos":226534925},"http":{"id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","method":"POST","headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JXp2MkVhJdCugWFF_VKHOX1toKkykjqMolkKVTsUGFzRJI3s9Kmn70XZbYWG"}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JXp2MkVhJdCugWFF_VKHOX1toKkykjqMolkKVTsUGFzRJI3s9Kmn70XZbYWG\"}"}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c0c5fb42-8f9f-4ccf-a7a3-9662de48f8db","keyName":"e2e-rate-a-1a46d9","subscription":"e2e-rate-iso-a-1a46d9","tenant":"e2e-shared-a-15ce38","userId":"c0c5fb42-8f9f-4ccf-a7a3-9662de48f8db","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\",\"requestedSubscription\":\"e2e-rate-iso-a-1a46d9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a46d9","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"}}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-15ce38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a46d9"}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c0c5fb42-8f9f-4ccf-a7a3-9662de48f8db","keyName":"e2e-rate-a-1a46d9","selected_subscription":"e2e-rate-iso-a-1a46d9","selected_subscription_key":"ai-tenant-e2e-shared-a-15ce38/e2e-rate-iso-a-1a46d9@ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a46d9","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6c4a00a-d0ee-48f7-87b4-65828fcc286d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44054","PortSpecifier":{"PortValue":44054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca95c75f-3864-469b-8af0-132c2d8255d4","method":"POST","path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions","host":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44054","PortSpecifier":{"PortValue":44054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727647,"nanos":270338228},"http":{"id":"ca95c75f-3864-469b-8af0-132c2d8255d4","method":"POST","headers":{":authority":"e2e-shared-a-15ce38.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JXp2MkVhJdCugWFF_VKHOX1toKkykjqMolkKVTsUGFzRJI3s9Kmn70XZbYWG"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JXp2MkVhJdCugWFF_VKHOX1toKkykjqMolkKVTsUGFzRJI3s9Kmn70XZbYWG\"}"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c0c5fb42-8f9f-4ccf-a7a3-9662de48f8db","keyName":"e2e-rate-a-1a46d9","subscription":"e2e-rate-iso-a-1a46d9","tenant":"e2e-shared-a-15ce38","userId":"c0c5fb42-8f9f-4ccf-a7a3-9662de48f8db","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\",\"requestedSubscription\":\"e2e-rate-iso-a-1a46d9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-15ce38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a46d9","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-15ce38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a46d9"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c0c5fb42-8f9f-4ccf-a7a3-9662de48f8db","keyName":"e2e-rate-a-1a46d9","selected_subscription":"e2e-rate-iso-a-1a46d9","selected_subscription_key":"ai-tenant-e2e-shared-a-15ce38/e2e-rate-iso-a-1a46d9@ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-15ce38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a46d9","namespace":"ai-tenant-e2e-shared-a-15ce38","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-15ce38/rate-test-model-15ce38"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca95c75f-3864-469b-8af0-132c2d8255d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41974","PortSpecifier":{"PortValue":41974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","method":"POST","path":"/ai-tenant-e2e-shared-b-19e216/rate-test-model-19e216/v1/completions","host":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41974","PortSpecifier":{"PortValue":41974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784727647,"nanos":304082939},"http":{"id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","method":"POST","headers":{":authority":"e2e-shared-b-19e216.apps.595187d4-7127-4c87-9409-8c65039c169e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-19e216/rate-test-model-19e216/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ymyxI2w84U5UZMOb_sjNm2FxWFhdgLF02oDzYtJMB8qHvSGFuZDvVoubshg7"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-19e216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ymyxI2w84U5UZMOb_sjNm2FxWFhdgLF02oDzYtJMB8qHvSGFuZDvVoubshg7\"}"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-19e216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5c897a08-af32-473b-a3a9-5c71d83b96e0","keyName":"e2e-rate-b-1a46d9","subscription":"e2e-rate-iso-b-1a46d9","tenant":"e2e-shared-b-19e216","userId":"5c897a08-af32-473b-a3a9-5c71d83b96e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-19e216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-19e216/rate-test-model-19e216\",\"requestedSubscription\":\"e2e-rate-iso-b-1a46d9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-19e216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-19e216","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1a46d9","namespace":"ai-tenant-e2e-shared-b-19e216","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-19e216/rate-test-model-19e216"}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-19e216/rate-test-model-19e216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-19e216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1a46d9"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5c897a08-af32-473b-a3a9-5c71d83b96e0","keyName":"e2e-rate-b-1a46d9","selected_subscription":"e2e-rate-iso-b-1a46d9","selected_subscription_key":"ai-tenant-e2e-shared-b-19e216/e2e-rate-iso-b-1a46d9@ai-tenant-e2e-shared-b-19e216/rate-test-model-19e216","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-19e216","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1a46d9","namespace":"ai-tenant-e2e-shared-b-19e216","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-19e216/rate-test-model-19e216"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:40:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3448803-bfe3-4c3a-9088-b5a537362fa3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af50e4cce54cf663f46cb386270b3abbeb688994b15e02554154d71e80dfc709"}
{"level":"info","ts":"2026-07-22T13:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f7aaf5c8544465448613944846430ddf32eed564c5c9f2ac16da29cd9d7a53b"}
{"level":"info","ts":"2026-07-22T13:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1e9d09afa8050d760c109b548cd83bc61c8abebf714ce569422d7fc657210b7"}
{"level":"info","ts":"2026-07-22T13:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da1ea08652b1a475d37151e1c2d23165c77595d0c9b2a2d8be72edfe27a09588"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11b1288610a9e940b44924e8303b2330d34058cb256f6240353cd08b5751cad1"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d41c62ba0207104deb340568c2f6aa5a2850a143b69fa17bf5860dd5c0e1e301"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ff857c894d07767896c5349983b8430ace8c3b581804402efba328fdb3531b9"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71e8a3801f2842bcc21c4fec27897c0f2487c702e3c2e2b030412fd58256810a"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fd7a5d035bf3ea591f5725cc2657d2f180d801993b3a9c338acf7c374a81255"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dca898a93f556ad20281755c87a1fab5c6327695dd660952b619c4e366198e67"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ecab40cc698ae5468d543a7c48f955a8f1a3dcdc2ab1d228bd9f5ea8b8987ba"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10975164b6865950cadc0178ff3e6e3b1370721df12618ff12c4a497d514d758"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dfece540247d7f3174cb5e371ed8bd9cfbc30f93463fad4e2f4db33e060a7bb"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c1ba8d00b2c3181e2cf931456d9618e38392202a3137145ad86fd1f56a29cb0"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/783c5adec6ae11eee6b3e7d83e1beed83ba0fe87fddbafd9795077a1c09baf58"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6bb4220f4400d457338c1d4408cf5329857cedb54dfc205c5a0c5ddb947efc2"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f568a220aa9b2b23a5e1f6d6a1d82fa4e3921f9410201607f491811ed808550"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb0ea79f2a7895eba61dde9ad3425b39352f6bb537d0c7a75c1f5b615015c957"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fbf43a5ebb6b922ed348336dcb5a395b7660cc12c044786a3632b8ff6cf4394"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d87a1240bafc74104210fc95338d7242ef47a75b43a6a4178ba174dad7dd4bf"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2667c6baa07a64d7e10524629314021efedaf500895d2f561eb22bab61d2e0b"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91cacc291c0d30bcb5355a78c5e40d44070df25257b9d6ddb7d616e1a9b6f5d6"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5011419797df0f2568314b0bb02a44a8b8b8331e8f266660cf528b3033995665"}
{"level":"info","ts":"2026-07-22T13:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91355d0b120084179f6ae958cfc5b973522720f6aa1bf3661bd2175ee1c56448"}