--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-06T01:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b25d8d8276c569ab90cb128dc07a4603f12d2dc7874e16d6878f599691ae5708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b25d8d8276c569ab90cb128dc07a4603f12d2dc7874e16d6878f599691ae5708"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b25d8d8276c569ab90cb128dc07a4603f12d2dc7874e16d6878f599691ae5708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b25d8d8276c569ab90cb128dc07a4603f12d2dc7874e16d6878f599691ae5708","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97453f96022f1eeb4d820b6ded961587245f48a7f74be70bc98c2b06700e6e40"}
{"level":"info","ts":"2026-07-06T01:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b25d8d8276c569ab90cb128dc07a4603f12d2dc7874e16d6878f599691ae5708"}
{"level":"info","ts":"2026-07-06T01:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa4e40bd33729a22c53cf53820dd020061002c9571e7ae04c4e327cbbe69020"}
{"level":"info","ts":"2026-07-06T01:53:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ffd660d663c522ed88e4ff63fc4e07f51619eaaac7dcca164fb423c5d91f262"}
{"level":"info","ts":"2026-07-06T01:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97453f96022f1eeb4d820b6ded961587245f48a7f74be70bc98c2b06700e6e40"}
{"level":"info","ts":"2026-07-06T01:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b25d8d8276c569ab90cb128dc07a4603f12d2dc7874e16d6878f599691ae5708"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca"}
{"level":"error","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b755d280b0f025c0bcec7d4752ec34d1870eb245b7c94ff9e73243504f26ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b755d280b0f025c0bcec7d4752ec34d1870eb245b7c94ff9e73243504f26ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11b755d280b0f025c0bcec7d4752ec34d1870eb245b7c94ff9e73243504f26ae"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b755d280b0f025c0bcec7d4752ec34d1870eb245b7c94ff9e73243504f26ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11b755d280b0f025c0bcec7d4752ec34d1870eb245b7c94ff9e73243504f26ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b755d280b0f025c0bcec7d4752ec34d1870eb245b7c94ff9e73243504f26ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11b755d280b0f025c0bcec7d4752ec34d1870eb245b7c94ff9e73243504f26ae"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11b755d280b0f025c0bcec7d4752ec34d1870eb245b7c94ff9e73243504f26ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85"}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca"}
{"level":"info","ts":"2026-07-06T01:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85"}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba"}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba"}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba"}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5"}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"}
{"level":"info","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7324f495f1b8e949ff658a76ac409e6ab4688a26877ac2939a0ed335f0bebcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7324f495f1b8e949ff658a76ac409e6ab4688a26877ac2939a0ed335f0bebcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7324f495f1b8e949ff658a76ac409e6ab4688a26877ac2939a0ed335f0bebcb"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7324f495f1b8e949ff658a76ac409e6ab4688a26877ac2939a0ed335f0bebcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7324f495f1b8e949ff658a76ac409e6ab4688a26877ac2939a0ed335f0bebcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7324f495f1b8e949ff658a76ac409e6ab4688a26877ac2939a0ed335f0bebcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7324f495f1b8e949ff658a76ac409e6ab4688a26877ac2939a0ed335f0bebcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7324f495f1b8e949ff658a76ac409e6ab4688a26877ac2939a0ed335f0bebcb"}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680"}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680"}
{"level":"info","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52884","PortSpecifier":{"PortValue":52884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52884","PortSpecifier":{"PortValue":52884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302904,"nanos":919676688},"http":{"id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d994ed8d-cd1f-4c6b-80a5-2b10043cc77f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58724","PortSpecifier":{"PortValue":58724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58724","PortSpecifier":{"PortValue":58724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302904,"nanos":978669844},"http":{"id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/auth-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70fa7dff-1fa4-45ff-8fb8-d4322643ffe1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52890","PortSpecifier":{"PortValue":52890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","method":"GET","path":"/maas-api/v1/api-keys/bf3b3f41-5b26-4b44-9122-e2476a6ab3d2","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52890","PortSpecifier":{"PortValue":52890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302905,"nanos":65104968},"http":{"id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","method":"GET","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bf3b3f41-5b26-4b44-9122-e2476a6ab3d2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bf3b3f41-5b26-4b44-9122-e2476a6ab3d2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcfbb87f-fc64-48a8-a237-088837e0fbef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58728","PortSpecifier":{"PortValue":58728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d322935d-693f-4952-af7b-9b72cc4e7823","method":"GET","path":"/maas-api/v1/api-keys/8fcfb27b-ade9-4aa3-bbb1-774771b66481","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58728","PortSpecifier":{"PortValue":58728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302905,"nanos":100185574},"http":{"id":"d322935d-693f-4952-af7b-9b72cc4e7823","method":"GET","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8fcfb27b-ade9-4aa3-bbb1-774771b66481",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8fcfb27b-ade9-4aa3-bbb1-774771b66481",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/auth-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:55:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d322935d-693f-4952-af7b-9b72cc4e7823","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38624","PortSpecifier":{"PortValue":38624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"337bf102-90e6-4740-9294-0f24a7b0cbca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38624","PortSpecifier":{"PortValue":38624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302922,"nanos":298807711},"http":{"id":"337bf102-90e6-4740-9294-0f24a7b0cbca","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"337bf102-90e6-4740-9294-0f24a7b0cbca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49382","PortSpecifier":{"PortValue":49382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49382","PortSpecifier":{"PortValue":49382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302922,"nanos":332827648},"http":{"id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/auth-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb3d32f9-5b2b-4537-9ca2-e4305b0c1f7e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54452945-dd70-4317-b501-8d364050ffcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38634","PortSpecifier":{"PortValue":38634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54452945-dd70-4317-b501-8d364050ffcc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54452945-dd70-4317-b501-8d364050ffcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38634","PortSpecifier":{"PortValue":38634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302922,"nanos":368900147},"http":{"id":"54452945-dd70-4317-b501-8d364050ffcc","method":"GET","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A2oaIRGgdzrBp5gF_w3D7SsUKhoz318yCLiRuWex03bE4pzFA2aG46kmjs1P"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A2oaIRGgdzrBp5gF_w3D7SsUKhoz318yCLiRuWex03bE4pzFA2aG46kmjs1P\"}"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"86b6151e-c40d-4d74-ba7a-3ce3802cc005","keyName":"e2e-auth-iso-a-2f4433","subscription":"e2e-auth-iso-7a0f56","tenant":"e2e-shared-a-5afb9c","userId":"86b6151e-c40d-4d74-ba7a-3ce3802cc005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54452945-dd70-4317-b501-8d364050ffcc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54452945-dd70-4317-b501-8d364050ffcc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7a0f56"}
{"level":"info","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54452945-dd70-4317-b501-8d364050ffcc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54452945-dd70-4317-b501-8d364050ffcc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46102","PortSpecifier":{"PortValue":46102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"283716e6-50d2-4f52-addf-a8bdf143978b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46102","PortSpecifier":{"PortValue":46102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302939,"nanos":558825410},"http":{"id":"283716e6-50d2-4f52-addf-a8bdf143978b","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"283716e6-50d2-4f52-addf-a8bdf143978b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47716","PortSpecifier":{"PortValue":47716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"653da127-c0f5-41e0-a712-b75ceff932b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47716","PortSpecifier":{"PortValue":47716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302939,"nanos":591596076},"http":{"id":"653da127-c0f5-41e0-a712-b75ceff932b0","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/auth-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653da127-c0f5-41e0-a712-b75ceff932b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47722","PortSpecifier":{"PortValue":47722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47722","PortSpecifier":{"PortValue":47722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302939,"nanos":624279819},"http":{"id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","method":"GET","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-111qwmVbZrDYZj8ad_L18gjEGa6gARJYXppfsq8OwLBXamXVGknN0Z0YzK1es"}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-111qwmVbZrDYZj8ad_L18gjEGa6gARJYXppfsq8OwLBXamXVGknN0Z0YzK1es\"}"}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T01:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6edd2b8-5b28-4c0e-8d33-545b19f7f45e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53462","PortSpecifier":{"PortValue":53462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53462","PortSpecifier":{"PortValue":53462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302961,"nanos":909046321},"http":{"id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d46b222-cd48-444c-9455-4d5aa1d93fa5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56688","PortSpecifier":{"PortValue":56688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56688","PortSpecifier":{"PortValue":56688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302961,"nanos":942005181},"http":{"id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/auth-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72f079da-2158-4a8c-ae0b-d547cb2981ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53468","PortSpecifier":{"PortValue":53468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53468","PortSpecifier":{"PortValue":53468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302961,"nanos":978991642},"http":{"id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a09e914d-98b6-41ab-98a0-b1f005f113dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56692","PortSpecifier":{"PortValue":56692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56692","PortSpecifier":{"PortValue":56692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302962,"nanos":38656799},"http":{"id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/auth-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22d30ffc-5d9a-4ff6-96de-38268592e3c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59294","PortSpecifier":{"PortValue":59294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59294","PortSpecifier":{"PortValue":59294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302979,"nanos":200359796},"http":{"id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a832cd2-b4ea-47f9-9ca6-ed941ae5bcca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191dec44-5415-40c0-a040-387d3d7ad961","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40180","PortSpecifier":{"PortValue":40180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"191dec44-5415-40c0-a040-387d3d7ad961","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191dec44-5415-40c0-a040-387d3d7ad961","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40180","PortSpecifier":{"PortValue":40180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302979,"nanos":235188052},"http":{"id":"191dec44-5415-40c0-a040-387d3d7ad961","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"191dec44-5415-40c0-a040-387d3d7ad961","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"191dec44-5415-40c0-a040-387d3d7ad961","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"191dec44-5415-40c0-a040-387d3d7ad961","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191dec44-5415-40c0-a040-387d3d7ad961","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191dec44-5415-40c0-a040-387d3d7ad961","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191dec44-5415-40c0-a040-387d3d7ad961","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/auth-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"191dec44-5415-40c0-a040-387d3d7ad961","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191dec44-5415-40c0-a040-387d3d7ad961","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191dec44-5415-40c0-a040-387d3d7ad961","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191dec44-5415-40c0-a040-387d3d7ad961","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191dec44-5415-40c0-a040-387d3d7ad961","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40184","PortSpecifier":{"PortValue":40184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","method":"GET","path":"/maas-api/v1/api-keys/c6852375-11df-4658-adee-11a7a5a84464","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40184","PortSpecifier":{"PortValue":40184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302979,"nanos":268249004},"http":{"id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","method":"GET","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c6852375-11df-4658-adee-11a7a5a84464",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c6852375-11df-4658-adee-11a7a5a84464",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/auth-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1f41d66-e7b8-4fcc-95d1-50c9769d9ab4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59296","PortSpecifier":{"PortValue":59296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","method":"GET","path":"/maas-api/v1/api-keys/c6852375-11df-4658-adee-11a7a5a84464","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59296","PortSpecifier":{"PortValue":59296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302979,"nanos":301812766},"http":{"id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","method":"GET","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c6852375-11df-4658-adee-11a7a5a84464",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c6852375-11df-4658-adee-11a7a5a84464",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63d621c8-38f2-4786-9e65-b4e44bcb1e9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44202","PortSpecifier":{"PortValue":44202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29bf0a78-031c-448d-b802-88bf4f852f86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44202","PortSpecifier":{"PortValue":44202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302996,"nanos":473454177},"http":{"id":"29bf0a78-031c-448d-b802-88bf4f852f86","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29bf0a78-031c-448d-b802-88bf4f852f86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58186","PortSpecifier":{"PortValue":58186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58186","PortSpecifier":{"PortValue":58186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302996,"nanos":505724217},"http":{"id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/auth-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a022aece-5952-4c7a-a05f-6cb2e293ebcc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302996,"nanos":537836753},"http":{"id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2k8mkBmlHl3Phwq3_Ul1Z9UxDtdGjFgEDh4oAF29RRVykamjBex10eOvt3t6"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2k8mkBmlHl3Phwq3_Ul1Z9UxDtdGjFgEDh4oAF29RRVykamjBex10eOvt3t6\"}"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"821e7405-3061-4eaf-b8ce-e6a948459c0c","keyName":"e2e-auth-iso-a-582134","subscription":"e2e-auth-iso-599e53","tenant":"e2e-shared-a-5afb9c","userId":"821e7405-3061-4eaf-b8ce-e6a948459c0c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/auth-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-599e53"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"004076cc-09e6-475c-bc88-5dc4ced81c0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/071e166165185c25768f4cda2b028f6858c2c5e37b0ad065e8c8e3727348abba"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dee3f228382576a2aaa13011d61ce7197863175e09a03b7aca02d4be6c49b1f5"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52b72651bb8772d87debe7bb362769f1c73925b7db3c8aef37f270c54842178c"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11b755d280b0f025c0bcec7d4752ec34d1870eb245b7c94ff9e73243504f26ae"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfaea1d5b1eba12d169143520c2277ec9723e601007c40e8b311e5b656686a8e"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70be9c91aba71a4f69005237ddb81a15298625a9eefb80749eb1000860398a85"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7cc95a2992dc0c6284039d2f712a35068644dc9c192f2ebaa2ebc758bf98680"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c72a25429b4aff49eef9406db6a19ec4c31c3de96b8781c6c2de14ae3d2e8db"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7324f495f1b8e949ff658a76ac409e6ab4688a26877ac2939a0ed335f0bebcb"}
{"level":"info","ts":"2026-07-06T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54e8c5d541830dc811fcd47c10f1bd8b472c35092fecc3fb4d3d3f80fe7f4fdf"}
{"level":"info","ts":"2026-07-06T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/227334a6d53d0071826091d4c8a23c9ab040babbb8912a7ff33d7bf26c162b72"}
{"level":"info","ts":"2026-07-06T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60f577e66d00579824361d4ba06ac1c4fb301fe1fcb57c1c3cf7b04a0d1999d5"}
{"level":"info","ts":"2026-07-06T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/187a5e4f949c6b22582734e3e2ec5521f22d0370705e37da4d725dddff6b42ca"}
{"level":"info","ts":"2026-07-06T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b458b410f0b923c3c63104afcc749d8e62765274d9d2f6a9ee648495cabb6134"}
{"level":"info","ts":"2026-07-06T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcaf89bf6140a986ad99870952cf44cebaf98679d426065e9e7b3648e4070dca"}
{"level":"info","ts":"2026-07-06T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff6d309a025bd61953ec2c48a01dd2a95cb669395ddc153cb65b19ea9ee342f1"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f"}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f"}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"}
{"level":"error","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"error","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d"}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d"}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d"}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478"}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"info","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:57:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3"}
{"level":"debug","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"}
{"level":"info","ts":"2026-07-06T01:57:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f"}
{"level":"info","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36764","PortSpecifier":{"PortValue":36764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36764","PortSpecifier":{"PortValue":36764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303059,"nanos":389352368},"http":{"id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/sub-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8196d279-8846-49c7-a7e0-4118d2c5ce6b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38136","PortSpecifier":{"PortValue":38136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42898350-078e-470a-81d2-a81b6d3bb40d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38136","PortSpecifier":{"PortValue":38136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303059,"nanos":428551370},"http":{"id":"42898350-078e-470a-81d2-a81b6d3bb40d","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/sub-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42898350-078e-470a-81d2-a81b6d3bb40d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36780","PortSpecifier":{"PortValue":36780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2dfc626-3c40-4874-b86b-e082a379ead4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36780","PortSpecifier":{"PortValue":36780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303059,"nanos":466406810},"http":{"id":"a2dfc626-3c40-4874-b86b-e082a379ead4","method":"GET","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XxcPjPVvsOy1aYaa_c7iiXQrzxq063upStwAgH9PehQqhdSdEZJsERiYU772"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XxcPjPVvsOy1aYaa_c7iiXQrzxq063upStwAgH9PehQqhdSdEZJsERiYU772\"}"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ef0ef41-ae93-4fa2-9221-131f9268d7ca","keyName":"e2e-sub-iso-1d98d4","subscription":"e2e-a-only-ce4276","tenant":"e2e-shared-a-5afb9c","userId":"8ef0ef41-ae93-4fa2-9221-131f9268d7ca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/sub-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-ce4276"}
{"level":"info","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2dfc626-3c40-4874-b86b-e082a379ead4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38138","PortSpecifier":{"PortValue":38138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38138","PortSpecifier":{"PortValue":38138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303059,"nanos":504689041},"http":{"id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","method":"GET","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-35AymIUPYop3fo7f_illnuMUuQgpZKW8VsTJp9Z0VJcvqS4TpZoPVGxbOvTi"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-35AymIUPYop3fo7f_illnuMUuQgpZKW8VsTJp9Z0VJcvqS4TpZoPVGxbOvTi\"}"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e86c9ad-b6db-44bc-981c-0599f90d46b3","keyName":"e2e-sub-iso-d9bb22","subscription":"e2e-b-only-ce4276","tenant":"e2e-shared-b-ed9e8f","userId":"5e86c9ad-b6db-44bc-981c-0599f90d46b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/sub-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-ce4276"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"868f9f82-c576-48aa-964c-2dd8ab2a2b72","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44268","PortSpecifier":{"PortValue":44268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72f00869-60d5-41dd-b7ae-23025e2802c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44268","PortSpecifier":{"PortValue":44268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303075,"nanos":936651709},"http":{"id":"72f00869-60d5-41dd-b7ae-23025e2802c6","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/sub-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72f00869-60d5-41dd-b7ae-23025e2802c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41506","PortSpecifier":{"PortValue":41506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41506","PortSpecifier":{"PortValue":41506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303075,"nanos":970446932},"http":{"id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/sub-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:57:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d81a2c22-6dce-409c-a834-65ca578b0cdc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44282","PortSpecifier":{"PortValue":44282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44282","PortSpecifier":{"PortValue":44282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303076,"nanos":4588774},"http":{"id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Swr6mu0HtEutMXQN_Avs2dEFylfboIdPU48CfAYRIJoJsbigwRVucpxEZiWD"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Swr6mu0HtEutMXQN_Avs2dEFylfboIdPU48CfAYRIJoJsbigwRVucpxEZiWD\"}"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5f413d2-155f-4d4d-9695-c35e8486f0e0","keyName":"e2e-sub-iso-ae7774","subscription":"e2e-shared-sub-fe06c4","tenant":"e2e-shared-a-5afb9c","userId":"f5f413d2-155f-4d4d-9695-c35e8486f0e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/sub-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-fe06c4"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f5e7251-f807-40c1-9f23-1e13b9ecd5b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92b542d3-5781-4526-a768-0dd044518ffa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92b542d3-5781-4526-a768-0dd044518ffa","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92b542d3-5781-4526-a768-0dd044518ffa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303076,"nanos":31910296},"http":{"id":"92b542d3-5781-4526-a768-0dd044518ffa","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17tLsxguLV1JetllR_ygR2H7VYQSZF2gji7M7Tta7BuZqOR5Woc3XRwqav4Xu"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17tLsxguLV1JetllR_ygR2H7VYQSZF2gji7M7Tta7BuZqOR5Woc3XRwqav4Xu\"}"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15f701e2-fa31-4718-8117-bbe5bc4e661f","keyName":"e2e-sub-iso-03ed6c","subscription":"e2e-shared-sub-fe06c4","tenant":"e2e-shared-b-ed9e8f","userId":"15f701e2-fa31-4718-8117-bbe5bc4e661f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92b542d3-5781-4526-a768-0dd044518ffa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/sub-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-fe06c4"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92b542d3-5781-4526-a768-0dd044518ffa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92b542d3-5781-4526-a768-0dd044518ffa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:57:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92b542d3-5781-4526-a768-0dd044518ffa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/365a18b5c9844438f215e8da46b62fa10f0901065c2ecacc359f40602b6ca78b"}
{"level":"info","ts":"2026-07-06T01:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9738c3e13415ef1579dafce5de2ff70de7ea27964758e3fb6ed69b26eb671c4"}
{"level":"info","ts":"2026-07-06T01:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5115ff607c0103f27b192bf44bfd8fbf5080580448cfe0e7d9268d90005cf4fc"}
{"level":"info","ts":"2026-07-06T01:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac99c886ae562d46944cba62cf647a62e3fcd4bee5bc968e2b806790503bf7e5"}
{"level":"info","ts":"2026-07-06T01:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dc625d552bd78b8539cb4eac8713eed5c5498638c5ac8db6197588a5e6a4ef7"}
{"level":"info","ts":"2026-07-06T01:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ed169c593e5ae5945a30d4bdc57ea4552c3d77a4b83fa7383b82bb128141eb3"}
{"level":"info","ts":"2026-07-06T01:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c4026ad16ec44827111fb738c74e5b9f1ebfaae4afec6be0d905dcf8f398966"}
{"level":"info","ts":"2026-07-06T01:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84985eccb701c0ae5837b73493eb6bf82e50443fa21eb0cc39fa05b1c3eaf35a"}
{"level":"debug","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13"}
{"level":"debug","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13"}
{"level":"info","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13"}
{"level":"debug","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13"}
{"level":"debug","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b"}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"}
{"level":"debug","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c070e5c3b30ce583a46412cd0b1e9e227db816fc3b51bb83f6e2bd6d4d3ec478"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a0473f46e6edfa77c81cdecb851ebe42d3d083b359feaf1d113a1612e4ad041"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63b8517bd7e60fa998f71b8f7b5c88194e2c144a5bfc843a02f2497cbd64d3aa"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b11f0afac208e68ba6aacc7187afd5900503069fa77791795442c5e75f7c0c1"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1862e18abd261518fbbeb86c708e645adc9648d1bb06834b979399fa31abe02a"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d73bf3b15e6782dc996e02f3211547f8d8af466b1f7a90146f6cd9ee08c8205e"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8acb74d4e9edd682bf65885beb58f1fcb8847ce457bdfe3eb2b06ca892ddb879"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fea29fb0c8be5566f3e80b615a66be1aa5f8bc7bf93e929c8c0701164b7c8d8f"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"debug","ts":"2026-07-06T01:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"}
{"level":"error","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"}
{"level":"debug","ts":"2026-07-06T01:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3"}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3"}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43"}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43"}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43"}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3"}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13"}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee"}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43"}
{"level":"info","ts":"2026-07-06T01:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee"}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516"}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516"}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495"}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05"}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360"}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d"}
{"level":"debug","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"info","ts":"2026-07-06T01:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3"}
{"level":"info","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51822","PortSpecifier":{"PortValue":51822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"500b6917-4f71-46a3-9b02-2b8f324968c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51822","PortSpecifier":{"PortValue":51822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303129,"nanos":203291272},"http":{"id":"500b6917-4f71-46a3-9b02-2b8f324968c5","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"500b6917-4f71-46a3-9b02-2b8f324968c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49480","PortSpecifier":{"PortValue":49480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88640072-f8a8-4593-bc51-129cfcbd23d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49480","PortSpecifier":{"PortValue":49480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303129,"nanos":238415273},"http":{"id":"88640072-f8a8-4593-bc51-129cfcbd23d2","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/rate-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88640072-f8a8-4593-bc51-129cfcbd23d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51826","PortSpecifier":{"PortValue":51826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51826","PortSpecifier":{"PortValue":51826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303129,"nanos":273068457},"http":{"id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RPBx6GM6et12eFvj_T2cyjjBoDRccIJ8MYd2r5YaXX6YFsM3rIGuX0xGxFbU"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RPBx6GM6et12eFvj_T2cyjjBoDRccIJ8MYd2r5YaXX6YFsM3rIGuX0xGxFbU\"}"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"faf48135-4837-4fb9-bed9-ffa257804f8f","keyName":"e2e-rate-a-9ef0ac","subscription":"e2e-rate-iso-a-9ef0ac","tenant":"e2e-shared-a-5afb9c","userId":"faf48135-4837-4fb9-bed9-ffa257804f8f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-9ef0ac\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9ef0ac","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9ef0ac"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"faf48135-4837-4fb9-bed9-ffa257804f8f","keyName":"e2e-rate-a-9ef0ac","selected_subscription":"e2e-rate-iso-a-9ef0ac","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-9ef0ac@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9ef0ac","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6cf8e55-2559-447f-bfd0-1c21b251a5d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51832","PortSpecifier":{"PortValue":51832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51832","PortSpecifier":{"PortValue":51832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303130,"nanos":318264650},"http":{"id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RPBx6GM6et12eFvj_T2cyjjBoDRccIJ8MYd2r5YaXX6YFsM3rIGuX0xGxFbU"}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RPBx6GM6et12eFvj_T2cyjjBoDRccIJ8MYd2r5YaXX6YFsM3rIGuX0xGxFbU\"}"}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"faf48135-4837-4fb9-bed9-ffa257804f8f","keyName":"e2e-rate-a-9ef0ac","subscription":"e2e-rate-iso-a-9ef0ac","tenant":"e2e-shared-a-5afb9c","userId":"faf48135-4837-4fb9-bed9-ffa257804f8f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-9ef0ac\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9ef0ac","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9ef0ac"}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"faf48135-4837-4fb9-bed9-ffa257804f8f","keyName":"e2e-rate-a-9ef0ac","selected_subscription":"e2e-rate-iso-a-9ef0ac","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-9ef0ac@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9ef0ac","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ca9b54f-fc40-42f7-8cd2-80ef14b8f4a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51840","PortSpecifier":{"PortValue":51840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51840","PortSpecifier":{"PortValue":51840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303131,"nanos":354199448},"http":{"id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RPBx6GM6et12eFvj_T2cyjjBoDRccIJ8MYd2r5YaXX6YFsM3rIGuX0xGxFbU"}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RPBx6GM6et12eFvj_T2cyjjBoDRccIJ8MYd2r5YaXX6YFsM3rIGuX0xGxFbU\"}"}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"faf48135-4837-4fb9-bed9-ffa257804f8f","keyName":"e2e-rate-a-9ef0ac","subscription":"e2e-rate-iso-a-9ef0ac","tenant":"e2e-shared-a-5afb9c","userId":"faf48135-4837-4fb9-bed9-ffa257804f8f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-9ef0ac\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9ef0ac","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9ef0ac"}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"faf48135-4837-4fb9-bed9-ffa257804f8f","keyName":"e2e-rate-a-9ef0ac","selected_subscription":"e2e-rate-iso-a-9ef0ac","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-9ef0ac@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9ef0ac","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ede08eb-1934-47fd-8a15-ea4f9c5edbb5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34074","PortSpecifier":{"PortValue":34074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cc37b91-08f9-47db-96f2-fd0052442918","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34074","PortSpecifier":{"PortValue":34074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303140,"nanos":37128641},"http":{"id":"2cc37b91-08f9-47db-96f2-fd0052442918","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc37b91-08f9-47db-96f2-fd0052442918","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35958","PortSpecifier":{"PortValue":35958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdebb996-d533-44a5-af38-007f21c4d5b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35958","PortSpecifier":{"PortValue":35958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303140,"nanos":72339925},"http":{"id":"fdebb996-d533-44a5-af38-007f21c4d5b9","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"]}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/db271fe5c738"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d4f7880-1a07-4419-a7ea-5f688803bc86"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5e015c20-4b92-4b1f-844e-1ce2228ec871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/rate-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdebb996-d533-44a5-af38-007f21c4d5b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34076","PortSpecifier":{"PortValue":34076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34076","PortSpecifier":{"PortValue":34076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303140,"nanos":106840682},"http":{"id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67\"}"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","subscription":"e2e-rate-iso-a-bb6d51","tenant":"e2e-shared-a-5afb9c","userId":"1576452c-943b-4f44-8db7-c0a712254685","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","selected_subscription":"e2e-rate-iso-a-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-bb6d51@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5abc0df8-bbb1-4518-a5ba-82aed16de5d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34092","PortSpecifier":{"PortValue":34092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34092","PortSpecifier":{"PortValue":34092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303141,"nanos":139560229},"http":{"id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67"}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67\"}"}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","subscription":"e2e-rate-iso-a-bb6d51","tenant":"e2e-shared-a-5afb9c","userId":"1576452c-943b-4f44-8db7-c0a712254685","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","selected_subscription":"e2e-rate-iso-a-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-bb6d51@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a89d5975-9fc1-46e6-9365-cf94aa9aec27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34098","PortSpecifier":{"PortValue":34098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34098","PortSpecifier":{"PortValue":34098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303142,"nanos":172522328},"http":{"id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67"}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67\"}"}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","subscription":"e2e-rate-iso-a-bb6d51","tenant":"e2e-shared-a-5afb9c","userId":"1576452c-943b-4f44-8db7-c0a712254685","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","selected_subscription":"e2e-rate-iso-a-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-bb6d51@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb8bf2ae-983c-49c5-a135-855b1cce9a71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34112","PortSpecifier":{"PortValue":34112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"745a4359-085b-4fa9-be2e-aeb3d793637c","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34112","PortSpecifier":{"PortValue":34112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303143,"nanos":210043219},"http":{"id":"745a4359-085b-4fa9-be2e-aeb3d793637c","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67"}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67\"}"}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","subscription":"e2e-rate-iso-a-bb6d51","tenant":"e2e-shared-a-5afb9c","userId":"1576452c-943b-4f44-8db7-c0a712254685","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","selected_subscription":"e2e-rate-iso-a-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-bb6d51@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"745a4359-085b-4fa9-be2e-aeb3d793637c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34114","PortSpecifier":{"PortValue":34114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34114","PortSpecifier":{"PortValue":34114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303144,"nanos":274873499},"http":{"id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67"}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67\"}"}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","subscription":"e2e-rate-iso-a-bb6d51","tenant":"e2e-shared-a-5afb9c","userId":"1576452c-943b-4f44-8db7-c0a712254685","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","selected_subscription":"e2e-rate-iso-a-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-bb6d51@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1332aa52-8c8f-4cf6-83e9-fa29df0bc03a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34120","PortSpecifier":{"PortValue":34120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34120","PortSpecifier":{"PortValue":34120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303145,"nanos":307899400},"http":{"id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67"}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67\"}"}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","subscription":"e2e-rate-iso-a-bb6d51","tenant":"e2e-shared-a-5afb9c","userId":"1576452c-943b-4f44-8db7-c0a712254685","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","selected_subscription":"e2e-rate-iso-a-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-bb6d51@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059214d6-c3f9-4ffd-a659-aaf2cf7eec96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34128","PortSpecifier":{"PortValue":34128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34128","PortSpecifier":{"PortValue":34128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303146,"nanos":347461004},"http":{"id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67"}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67\"}"}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","subscription":"e2e-rate-iso-a-bb6d51","tenant":"e2e-shared-a-5afb9c","userId":"1576452c-943b-4f44-8db7-c0a712254685","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","selected_subscription":"e2e-rate-iso-a-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-bb6d51@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a324a783-ed3a-4b10-bafe-ff2e20f2c5f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34138","PortSpecifier":{"PortValue":34138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34138","PortSpecifier":{"PortValue":34138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303147,"nanos":383353804},"http":{"id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67"}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67\"}"}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","subscription":"e2e-rate-iso-a-bb6d51","tenant":"e2e-shared-a-5afb9c","userId":"1576452c-943b-4f44-8db7-c0a712254685","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","selected_subscription":"e2e-rate-iso-a-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-bb6d51@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6ef8f67-ab62-41c6-a76a-6d590c55da33","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34068","PortSpecifier":{"PortValue":34068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff9974e5-300f-4508-a29d-ddf3337b9069","method":"POST","path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions","host":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34068","PortSpecifier":{"PortValue":34068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303148,"nanos":417808272},"http":{"id":"ff9974e5-300f-4508-a29d-ddf3337b9069","method":"POST","headers":{":authority":"e2e-shared-a-5afb9c.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Px210ukW99bLWsMI_GpRxSfZEE5iBlAGhGsaehG109iGsYq5UlrZ8BQ57k67\"}"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","subscription":"e2e-rate-iso-a-bb6d51","tenant":"e2e-shared-a-5afb9c","userId":"1576452c-943b-4f44-8db7-c0a712254685","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\",\"requestedSubscription\":\"e2e-rate-iso-a-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5afb9c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1576452c-943b-4f44-8db7-c0a712254685","keyName":"e2e-rate-a-bb6d51","selected_subscription":"e2e-rate-iso-a-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-a-5afb9c/e2e-rate-iso-a-bb6d51@ai-tenant-e2e-shared-a-5afb9c/rate-test-model-5afb9c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5afb9c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bb6d51","namespace":"ai-tenant-e2e-shared-a-5afb9c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff9974e5-300f-4508-a29d-ddf3337b9069","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55402","PortSpecifier":{"PortValue":55402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","method":"POST","path":"/ai-tenant-e2e-shared-b-ed9e8f/rate-test-model-ed9e8f/v1/completions","host":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55402","PortSpecifier":{"PortValue":55402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783303148,"nanos":453740348},"http":{"id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","method":"POST","headers":{":authority":"e2e-shared-b-ed9e8f.apps.5bdfb649-4208-4e5f-b70e-db271fe5c738.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ed9e8f/rate-test-model-ed9e8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jX9MBguCHjibLpI8_diD6luv1ISGXNA6yt80CxmAKvhnOHrP5WsHLG4lFxAr"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jX9MBguCHjibLpI8_diD6luv1ISGXNA6yt80CxmAKvhnOHrP5WsHLG4lFxAr\"}"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"039c4bcc-5e54-4b6c-8fda-4bbbfa872474","keyName":"e2e-rate-b-bb6d51","subscription":"e2e-rate-iso-b-bb6d51","tenant":"e2e-shared-b-ed9e8f","userId":"039c4bcc-5e54-4b6c-8fda-4bbbfa872474","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ed9e8f/rate-test-model-ed9e8f\",\"requestedSubscription\":\"e2e-rate-iso-b-bb6d51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ed9e8f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ed9e8f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bb6d51","namespace":"ai-tenant-e2e-shared-b-ed9e8f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ed9e8f/rate-test-model-ed9e8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bb6d51"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"039c4bcc-5e54-4b6c-8fda-4bbbfa872474","keyName":"e2e-rate-b-bb6d51","selected_subscription":"e2e-rate-iso-b-bb6d51","selected_subscription_key":"ai-tenant-e2e-shared-b-ed9e8f/e2e-rate-iso-b-bb6d51@ai-tenant-e2e-shared-b-ed9e8f/rate-test-model-ed9e8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ed9e8f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bb6d51","namespace":"ai-tenant-e2e-shared-b-ed9e8f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7935c271-1e06-4393-b83e-a7c3acf1c0e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04a3f032a02768111c9c5d08f6ce7e5cc4a1e666c5973e491226ceb378bfcc43"}
{"level":"info","ts":"2026-07-06T01:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76d3c3446ffdc7566c49a3522dc3952895c468d9b97221193c2b8d448406dc13"}
{"level":"info","ts":"2026-07-06T01:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34e8283117285addd9618cd1de2806c5b02c31d6973a232913373686d879963f"}
{"level":"info","ts":"2026-07-06T01:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f68a636ce276a6fc6d481a517e37d423335d9f87dbd7369439161b3138a7a93"}
{"level":"info","ts":"2026-07-06T01:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c255d5732cc9729f58f35b28e2bf8201c0d3f3f1b7cd9e6c3eac1e337f17495"}
{"level":"info","ts":"2026-07-06T01:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4526d7c88bcba85c0296e848c16c6a5edcc2e1cfca8df1a325352bada305b360"}
{"level":"info","ts":"2026-07-06T01:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd43337ea19013fdedc59573656a43d45d35eb5aff945c14cb18cb827a2c0cf4"}
{"level":"info","ts":"2026-07-06T01:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a8f597d6879a7cb000baeb2ba93d4662c0b9e650dba4ad57ee78b0644d0aa5f"}
{"level":"info","ts":"2026-07-06T01:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c39050c8675fcf9e8aa932034cab64ad5f92536a750e97397d4b8c65bfb516"}
{"level":"info","ts":"2026-07-06T01:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7bbdeb02d40232bf7f022709d0320f132b9d429e0d9f067f5215b543e4a22a3"}
{"level":"info","ts":"2026-07-06T01:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b92b96f594d0b92cf6c26b05bb0c00bc241778056e27bcf5fc0457ad3aeef4b"}
{"level":"info","ts":"2026-07-06T01:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/116a47c36c99c22908c876036b760c7acbde5afc0967c5edfa0b14bf7e3cd894"}
{"level":"info","ts":"2026-07-06T01:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/337fb4f9a0608cd0f60a50bb7cc786705c237a14d81231c75a76081b93184a10"}
{"level":"info","ts":"2026-07-06T01:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4322859bcd3aac0fd8d9fc95345073361d4796665e2612484d8e0366e1fae05"}
{"level":"info","ts":"2026-07-06T01:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e542a81c59d64d06b4af77f58c7190455efef14ef50d7857f517449e3504cba9"}
{"level":"info","ts":"2026-07-06T01:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1209c87f4164685e05d402f073be6d9a253a21d48deb41959a14ea75b044f97d"}
{"level":"info","ts":"2026-07-06T01:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/706fd5933926a56babac5b7ab1078d8ef5f8e98ee328dd41230817a9b45e798d"}
{"level":"info","ts":"2026-07-06T01:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7260d6ca721808c5970414fc1ed81eea03d8e9b82bb9b358231605549e6b86dc"}
{"level":"info","ts":"2026-07-06T01:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08f85de0717d7b708b35c91f15675cbbdf728cdedd747b1a67c1eedd24b37aee"}
{"level":"info","ts":"2026-07-06T01:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca26ca792309619dd45f7dc6b8e6737264ad19acfe94e2d09c0e81c803609dc1"}