--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-14T17:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ea63fb7faaed8a26fa292670adc933c4a64e539d5a5bf16b7676c9ca5320b00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"error","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"debug","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc"}
{"level":"info","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc"}
{"level":"debug","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc"}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"error","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7"}
{"level":"info","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58846","PortSpecifier":{"PortValue":58846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58846","PortSpecifier":{"PortValue":58846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048775,"nanos":456829605},"http":{"id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","tokenreview":{"name":""}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05cfcfb3-39b0-42a5-99c3-0d7c942ca93f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41916","PortSpecifier":{"PortValue":41916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41916","PortSpecifier":{"PortValue":41916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048775,"nanos":521334984},"http":{"id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","tokenreview":{"name":""}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/auth-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f0b67b4-dc25-4433-868b-262cd66df7d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58848","PortSpecifier":{"PortValue":58848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","method":"GET","path":"/maas-api/v1/api-keys/7a538832-53fe-46ba-b73a-a3955b959e4d","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58848","PortSpecifier":{"PortValue":58848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048775,"nanos":610418809},"http":{"id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","method":"GET","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7a538832-53fe-46ba-b73a-a3955b959e4d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7a538832-53fe-46ba-b73a-a3955b959e4d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0715146-de8a-4b80-8a0a-f01c1dcbbf7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41930","PortSpecifier":{"PortValue":41930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","method":"GET","path":"/maas-api/v1/api-keys/74d1d8ce-e05d-4f8e-b9d3-70c818393b9a","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41930","PortSpecifier":{"PortValue":41930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048775,"nanos":647959010},"http":{"id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","method":"GET","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/74d1d8ce-e05d-4f8e-b9d3-70c818393b9a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/74d1d8ce-e05d-4f8e-b9d3-70c818393b9a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/auth-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f5b3119-d9ec-43f6-b794-ed5b3bce2dcd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41284","PortSpecifier":{"PortValue":41284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4eef79fa-239c-46cb-a670-8e03233602e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41284","PortSpecifier":{"PortValue":41284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048792,"nanos":904052352},"http":{"id":"4eef79fa-239c-46cb-a670-8e03233602e7","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eef79fa-239c-46cb-a670-8e03233602e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51630","PortSpecifier":{"PortValue":51630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51630","PortSpecifier":{"PortValue":51630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048792,"nanos":944289759},"http":{"id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/auth-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c05ba62d-100d-4244-8eae-b4419f7e2e9b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41288","PortSpecifier":{"PortValue":41288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41288","PortSpecifier":{"PortValue":41288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048792,"nanos":992694061},"http":{"id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","method":"GET","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AiCp2t7m0uA5ERSL_WCfvMxC5dZEJ2YYMZQTVABThjFfKy5dG6U7HmkXQlnC"}
{"level":"debug","ts":"2026-07-14T17:06:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AiCp2t7m0uA5ERSL_WCfvMxC5dZEJ2YYMZQTVABThjFfKy5dG6U7HmkXQlnC\"}"}
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3046bf12-34e3-4928-bf25-b33999d0f2e7","keyName":"e2e-auth-iso-a-b627ff","subscription":"e2e-auth-iso-172e01","tenant":"e2e-shared-a-2f2de5","userId":"3046bf12-34e3-4928-bf25-b33999d0f2e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-172e01"}
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c3763fd-1390-4f16-9ce0-b3a7daef7df4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22aead97-ad19-462c-973c-05871186c73c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38394","PortSpecifier":{"PortValue":38394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22aead97-ad19-462c-973c-05871186c73c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22aead97-ad19-462c-973c-05871186c73c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38394","PortSpecifier":{"PortValue":38394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048814,"nanos":517408864},"http":{"id":"22aead97-ad19-462c-973c-05871186c73c","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22aead97-ad19-462c-973c-05871186c73c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22aead97-ad19-462c-973c-05871186c73c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22aead97-ad19-462c-973c-05871186c73c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22aead97-ad19-462c-973c-05871186c73c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22aead97-ad19-462c-973c-05871186c73c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22aead97-ad19-462c-973c-05871186c73c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22aead97-ad19-462c-973c-05871186c73c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22aead97-ad19-462c-973c-05871186c73c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22aead97-ad19-462c-973c-05871186c73c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22aead97-ad19-462c-973c-05871186c73c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22aead97-ad19-462c-973c-05871186c73c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43224","PortSpecifier":{"PortValue":43224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43224","PortSpecifier":{"PortValue":43224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048814,"nanos":559601521},"http":{"id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/auth-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f2e642-a9ea-4ade-8997-0bd0596c951b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43226","PortSpecifier":{"PortValue":43226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43226","PortSpecifier":{"PortValue":43226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048814,"nanos":596205809},"http":{"id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","method":"GET","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eODRp5r2tXMsKKGI_FkUcZwh8kwtcxFc8jqsEXXhzmj8v0KNZzqglwKy0DJ5"}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eODRp5r2tXMsKKGI_FkUcZwh8kwtcxFc8jqsEXXhzmj8v0KNZzqglwKy0DJ5\"}"}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T17:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b8e71b6-3241-4faf-9740-9e7a3a8c13be","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-14T17:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47832","PortSpecifier":{"PortValue":47832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2391d9ce-6e14-468c-bad7-f06275c2b627","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47832","PortSpecifier":{"PortValue":47832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048831,"nanos":993854231},"http":{"id":"2391d9ce-6e14-468c-bad7-f06275c2b627","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2391d9ce-6e14-468c-bad7-f06275c2b627","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40454","PortSpecifier":{"PortValue":40454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40454","PortSpecifier":{"PortValue":40454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048832,"nanos":32745514},"http":{"id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/auth-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb0a46ce-708f-41de-9491-b0a4a5be746b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47846","PortSpecifier":{"PortValue":47846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c74adee2-8590-41d9-9a6c-62bfe154567d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47846","PortSpecifier":{"PortValue":47846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048832,"nanos":82113241},"http":{"id":"c74adee2-8590-41d9-9a6c-62bfe154567d","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c74adee2-8590-41d9-9a6c-62bfe154567d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048832,"nanos":133758325},"http":{"id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/auth-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26f8aaf-88de-4aa5-8339-45a88eb09c5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49986","PortSpecifier":{"PortValue":49986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49986","PortSpecifier":{"PortValue":49986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048847,"nanos":588478718},"http":{"id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e827cb1-3f0a-49d2-9f9d-625c04146d40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42452","PortSpecifier":{"PortValue":42452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"316f2640-21b3-468d-b329-0430d9bbc23c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42452","PortSpecifier":{"PortValue":42452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048847,"nanos":627813893},"http":{"id":"316f2640-21b3-468d-b329-0430d9bbc23c","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/auth-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"316f2640-21b3-468d-b329-0430d9bbc23c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42466","PortSpecifier":{"PortValue":42466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","method":"GET","path":"/maas-api/v1/api-keys/bbc4b896-8057-4f85-aa61-026c096e99da","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42466","PortSpecifier":{"PortValue":42466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048847,"nanos":673317865},"http":{"id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","method":"GET","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbc4b896-8057-4f85-aa61-026c096e99da",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbc4b896-8057-4f85-aa61-026c096e99da",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/auth-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f9cbacb-267c-4200-bed8-c3fff84c7518","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49988","PortSpecifier":{"PortValue":49988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","method":"GET","path":"/maas-api/v1/api-keys/bbc4b896-8057-4f85-aa61-026c096e99da","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49988","PortSpecifier":{"PortValue":49988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048847,"nanos":710557371},"http":{"id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","method":"GET","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbc4b896-8057-4f85-aa61-026c096e99da",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bbc4b896-8057-4f85-aa61-026c096e99da",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c847f18f-e4f9-4b1b-988d-ee7f6d2be89b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40056","PortSpecifier":{"PortValue":40056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40056","PortSpecifier":{"PortValue":40056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048863,"nanos":171773029},"http":{"id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e8d9893-f97e-42d9-8a01-5a5b4a8cdd4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a213562-49d0-414a-8b07-f298d36167c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48712","PortSpecifier":{"PortValue":48712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a213562-49d0-414a-8b07-f298d36167c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a213562-49d0-414a-8b07-f298d36167c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48712","PortSpecifier":{"PortValue":48712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048863,"nanos":215193654},"http":{"id":"9a213562-49d0-414a-8b07-f298d36167c8","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a213562-49d0-414a-8b07-f298d36167c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a213562-49d0-414a-8b07-f298d36167c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a213562-49d0-414a-8b07-f298d36167c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a213562-49d0-414a-8b07-f298d36167c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a213562-49d0-414a-8b07-f298d36167c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a213562-49d0-414a-8b07-f298d36167c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/auth-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a213562-49d0-414a-8b07-f298d36167c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a213562-49d0-414a-8b07-f298d36167c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a213562-49d0-414a-8b07-f298d36167c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a213562-49d0-414a-8b07-f298d36167c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a213562-49d0-414a-8b07-f298d36167c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40070","PortSpecifier":{"PortValue":40070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40070","PortSpecifier":{"PortValue":40070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048863,"nanos":257326165},"http":{"id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mKD65h9YcMKbPl5c_jOD4RjyuZ3o79aLr6UmalywGt0KlsmxM15wp6M3hWns"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mKD65h9YcMKbPl5c_jOD4RjyuZ3o79aLr6UmalywGt0KlsmxM15wp6M3hWns\"}"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f4dccad-9d2b-4708-8bfe-e9c3f8802093","keyName":"e2e-auth-iso-a-6ad3ac","subscription":"e2e-auth-iso-174f0f","tenant":"e2e-shared-a-2f2de5","userId":"6f4dccad-9d2b-4708-8bfe-e9c3f8802093","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/auth-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-174f0f"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:07:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"046478d6-f01d-4bda-ac24-9a64b25b22bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ea63fb7faaed8a26fa292670adc933c4a64e539d5a5bf16b7676c9ca5320b00"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f23761bc36a40b8bebb4c6f9ab6a68134a464dcf75be4a5a13788454bb2deeef"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f87aa665ebb59f43da2cf0472b424a72988af4bd4c849b330310f04e7789d1ea"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e57ec5d47a6d5a2613db844ed84b9867d2087737b16f21363b4f17bf1a5f028e"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/252ee6d9480c2f92041f52951ea100249a1b0c76489bace09aa7b3a2a1194b9c"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87df86daf983c95e7aa82ff8fa64001fbe3f4c30ef3e30fd91f09a45256c2e9a"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8a26699f5032b94167bc7f9a8910363db2963f7cfd467c89c1fb7424d3075ec"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f49ec6a7c22f412f3bdba1eae93f7b80502db7ce8499da8a9d51874abce3e6a1"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00015035a420fbfa5bdaced4e290f7b7f359ff266b2fd5c5ef142b7d93268dfc"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b74a7480bdff8be6444e3b0d67f29e309b68547e3d6a795d991f9b02b7932ba"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c7e0ddd6d48e51535852ba2d97a28dff38f3f385ad9030268bf2c88aeed9a41"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af0adffbc2dc2393d1271f7ad34266898658770005ec0e0f0727232a8680e678"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feeaf089240584ef5d30e4ad79d2d369fe4cdf9ece759931811badd0e440f810"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe7b5a81130f19350e6eb8c41ed4f094b0c8c54b77f98f0c223ac51f66bedfb0"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4acd361540d862af899f009e792380a6e6af4dbdc2dc7f233dcd442302035444"}
{"level":"info","ts":"2026-07-14T17:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2561be8688605c5ba7849ae2ccb53917015954470b4018e4351de73d0c65fdb7"}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8"}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8"}
{"level":"error","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8"}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8"}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"error","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83"}
{"level":"info","ts":"2026-07-14T17:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568"}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323"}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323"}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"info","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323"}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf"}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf"}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"}
{"level":"error","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"debug","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"info","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"debug","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"info","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"debug","ts":"2026-07-14T17:08:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83"}
{"level":"error","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323"}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"debug","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"info","ts":"2026-07-14T17:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd"}
{"level":"info","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53964","PortSpecifier":{"PortValue":53964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53964","PortSpecifier":{"PortValue":53964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048940,"nanos":134154431},"http":{"id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/sub-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29b4d1ff-52a0-4df7-8916-5d801135cd94","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89b197d7-cf01-4eb6-8053-a14478590347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59064","PortSpecifier":{"PortValue":59064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89b197d7-cf01-4eb6-8053-a14478590347","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89b197d7-cf01-4eb6-8053-a14478590347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59064","PortSpecifier":{"PortValue":59064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048940,"nanos":183836746},"http":{"id":"89b197d7-cf01-4eb6-8053-a14478590347","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89b197d7-cf01-4eb6-8053-a14478590347","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89b197d7-cf01-4eb6-8053-a14478590347","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89b197d7-cf01-4eb6-8053-a14478590347","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b197d7-cf01-4eb6-8053-a14478590347","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b197d7-cf01-4eb6-8053-a14478590347","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89b197d7-cf01-4eb6-8053-a14478590347","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/sub-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89b197d7-cf01-4eb6-8053-a14478590347","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b197d7-cf01-4eb6-8053-a14478590347","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89b197d7-cf01-4eb6-8053-a14478590347","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89b197d7-cf01-4eb6-8053-a14478590347","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89b197d7-cf01-4eb6-8053-a14478590347","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53968","PortSpecifier":{"PortValue":53968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"182934f0-9c14-43f3-8cb9-def06af9199d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53968","PortSpecifier":{"PortValue":53968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048940,"nanos":227953067},"http":{"id":"182934f0-9c14-43f3-8cb9-def06af9199d","method":"GET","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BLBjJMvMbeuEW9Ku_coAagF03y0doXiWsbEryStLTQPriI6E7pFwvNG2GPVo"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BLBjJMvMbeuEW9Ku_coAagF03y0doXiWsbEryStLTQPriI6E7pFwvNG2GPVo\"}"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5debb75-1dfe-4d32-8a50-2df1324253f4","keyName":"e2e-sub-iso-4ad1c0","subscription":"e2e-a-only-5eea29","tenant":"e2e-shared-a-2f2de5","userId":"c5debb75-1dfe-4d32-8a50-2df1324253f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/sub-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5eea29"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"182934f0-9c14-43f3-8cb9-def06af9199d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59068","PortSpecifier":{"PortValue":59068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59068","PortSpecifier":{"PortValue":59068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048940,"nanos":272005730},"http":{"id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","method":"GET","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19X6GrU5jzfG3Z2zJ_3936DJ358bZsw3Aq7loWDqNiF5Rca4hrltVURcZiL86"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19X6GrU5jzfG3Z2zJ_3936DJ358bZsw3Aq7loWDqNiF5Rca4hrltVURcZiL86\"}"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ecb5881-b326-45a7-97bd-5e815812e6ed","keyName":"e2e-sub-iso-f01968","subscription":"e2e-b-only-5eea29","tenant":"e2e-shared-b-21db6d","userId":"0ecb5881-b326-45a7-97bd-5e815812e6ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/sub-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5eea29"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:09:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a0cbfb2-dca9-409f-9c47-57c4519978a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38352","PortSpecifier":{"PortValue":38352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38352","PortSpecifier":{"PortValue":38352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048959,"nanos":862283862},"http":{"id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/sub-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3925b9bb-1ac9-4c7a-abb9-885146d7ab03","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c96ef38-986d-47df-8394-786205e1dc70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59782","PortSpecifier":{"PortValue":59782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c96ef38-986d-47df-8394-786205e1dc70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c96ef38-986d-47df-8394-786205e1dc70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59782","PortSpecifier":{"PortValue":59782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048959,"nanos":900888781},"http":{"id":"7c96ef38-986d-47df-8394-786205e1dc70","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c96ef38-986d-47df-8394-786205e1dc70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c96ef38-986d-47df-8394-786205e1dc70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c96ef38-986d-47df-8394-786205e1dc70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c96ef38-986d-47df-8394-786205e1dc70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c96ef38-986d-47df-8394-786205e1dc70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c96ef38-986d-47df-8394-786205e1dc70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/sub-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c96ef38-986d-47df-8394-786205e1dc70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c96ef38-986d-47df-8394-786205e1dc70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c96ef38-986d-47df-8394-786205e1dc70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c96ef38-986d-47df-8394-786205e1dc70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c96ef38-986d-47df-8394-786205e1dc70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e877eb-e542-4c99-b290-7c1979820d65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38360","PortSpecifier":{"PortValue":38360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46e877eb-e542-4c99-b290-7c1979820d65","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e877eb-e542-4c99-b290-7c1979820d65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38360","PortSpecifier":{"PortValue":38360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048959,"nanos":941342966},"http":{"id":"46e877eb-e542-4c99-b290-7c1979820d65","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-R8H16tJ8g0afBw9K_vRtueX9kTQH9zLfVHU4WvO5xBv2TqC4W4JkoujceAUl"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-R8H16tJ8g0afBw9K_vRtueX9kTQH9zLfVHU4WvO5xBv2TqC4W4JkoujceAUl\"}"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed49e5b6-29c5-4a7a-97a2-e911f941cc1d","keyName":"e2e-sub-iso-5353d3","subscription":"e2e-shared-sub-4b992a","tenant":"e2e-shared-a-2f2de5","userId":"ed49e5b6-29c5-4a7a-97a2-e911f941cc1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46e877eb-e542-4c99-b290-7c1979820d65","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/sub-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4b992a"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46e877eb-e542-4c99-b290-7c1979820d65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e877eb-e542-4c99-b290-7c1979820d65","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e877eb-e542-4c99-b290-7c1979820d65","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59790","PortSpecifier":{"PortValue":59790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59790","PortSpecifier":{"PortValue":59790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048959,"nanos":973149710},"http":{"id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19YFzRKUYuPOpCcdD_gFYgNFVqRhTTU8SnIBhfuLa6N0PIaI8EhstzDjbINuw"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19YFzRKUYuPOpCcdD_gFYgNFVqRhTTU8SnIBhfuLa6N0PIaI8EhstzDjbINuw\"}"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7aed5396-eb33-4680-b13c-097d05e22984","keyName":"e2e-sub-iso-8eaff7","subscription":"e2e-shared-sub-4b992a","tenant":"e2e-shared-b-21db6d","userId":"7aed5396-eb33-4680-b13c-097d05e22984","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/sub-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4b992a"}
{"level":"info","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cec2360-f5b8-4a3d-b046-c6491e601d12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d612edb75fe5bc345a50cc6d34338c034ca1ead03a1a161258f103ac7adbe65"}
{"level":"info","ts":"2026-07-14T17:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a6b300fd14935456848f159c43db8ee5dbe0a7a95ba1e1da9d96068317cc819"}
{"level":"info","ts":"2026-07-14T17:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f31ab98b72bd76794d30e18cc36295aaff67c4fafbeaf8255eebc5e84a1babd"}
{"level":"info","ts":"2026-07-14T17:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51e57514c7a0fd0cccbba463368047b5c2a53f4876abed48c66c8cd8361cf4b8"}
{"level":"info","ts":"2026-07-14T17:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7e4523b72698ce91e84e0416f18b9c0f3203681a0e37faab4f2e6f5302c7e7b"}
{"level":"info","ts":"2026-07-14T17:09:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df442cd23d165a096d28b984ae116caa27e7aa99f60a1224f23a293815b4cb82"}
{"level":"info","ts":"2026-07-14T17:09:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da88c44136af834574786500528283cef6329ed5227a11be867924bf40f78568"}
{"level":"info","ts":"2026-07-14T17:09:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/258d829c5d11af3ec6988fa9c3b6f40953d99ff8d2783ef88b17150a1f8c5e83"}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b75d19e2cb85496ed8e0f94e5d920f2d7380dc7deffbbfc125fd9c37ac1673d"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6545bad110eefa73efae3970959d9ad654cf9d68108732e7d2b3375de097f27"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/390b981486b6e5b0f797701fc39f253c126f4650bfce084607afbed00cfc630d"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c8ec213408eb3d2b19f4c9be11c0be1621f7b02d3942f1c3b5afd52e0d85d8c"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd01b0a147cd00c2783da2b6251f09708db89bc242f4f0b3d9d4907b613c7dcf"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b61fe6ffbbb5d0d5c8765d5b0debd4d12b96219200f521e58aa0f74dcddddf5c"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0572ba438e2d71b109ac11a2e05b3aa57dc46a68e4efb17a54c13074dae08650"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54a8bf80579643b0c71b2f7cde8fe148f7096abf3ffa6d115b499bfac9dc7323"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd"}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd"}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"}
{"level":"error","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2bc998360d5d0d545999cae9a5c9506138be3bae098d12f62ff3b4df3f7d37"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2bc998360d5d0d545999cae9a5c9506138be3bae098d12f62ff3b4df3f7d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2bc998360d5d0d545999cae9a5c9506138be3bae098d12f62ff3b4df3f7d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2bc998360d5d0d545999cae9a5c9506138be3bae098d12f62ff3b4df3f7d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2bc998360d5d0d545999cae9a5c9506138be3bae098d12f62ff3b4df3f7d37"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2bc998360d5d0d545999cae9a5c9506138be3bae098d12f62ff3b4df3f7d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"}
{"level":"info","ts":"2026-07-14T17:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54"}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54"}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2bc998360d5d0d545999cae9a5c9506138be3bae098d12f62ff3b4df3f7d37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2bc998360d5d0d545999cae9a5c9506138be3bae098d12f62ff3b4df3f7d37"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"}
{"level":"debug","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"}
{"level":"info","ts":"2026-07-14T17:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50132","PortSpecifier":{"PortValue":50132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dddecb7c-c941-4a0e-89ae-27f79265885a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50132","PortSpecifier":{"PortValue":50132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049013,"nanos":656196918},"http":{"id":"dddecb7c-c941-4a0e-89ae-27f79265885a","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dddecb7c-c941-4a0e-89ae-27f79265885a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34792","PortSpecifier":{"PortValue":34792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34792","PortSpecifier":{"PortValue":34792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049013,"nanos":695285022},"http":{"id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/rate-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77295b04-bfb1-40fb-a8bb-2a1df8c1b712","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5472154-a61c-427a-be8d-43407bb6e137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50136","PortSpecifier":{"PortValue":50136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5472154-a61c-427a-be8d-43407bb6e137","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5472154-a61c-427a-be8d-43407bb6e137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50136","PortSpecifier":{"PortValue":50136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049013,"nanos":736506249},"http":{"id":"d5472154-a61c-427a-be8d-43407bb6e137","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SXGJXQHxxuwxh4hm_NAIDbqI1VwH01FqlptZnt6bXBljgOngar7u6J7cj02C"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SXGJXQHxxuwxh4hm_NAIDbqI1VwH01FqlptZnt6bXBljgOngar7u6J7cj02C\"}"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"398dbaa3-cceb-4c95-b2e7-e9a3da8af794","keyName":"e2e-rate-a-cab975","subscription":"e2e-rate-iso-a-cab975","tenant":"e2e-shared-a-2f2de5","userId":"398dbaa3-cceb-4c95-b2e7-e9a3da8af794","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-cab975\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cab975","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5472154-a61c-427a-be8d-43407bb6e137","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cab975"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5472154-a61c-427a-be8d-43407bb6e137","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"398dbaa3-cceb-4c95-b2e7-e9a3da8af794","keyName":"e2e-rate-a-cab975","selected_subscription":"e2e-rate-iso-a-cab975","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-cab975@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cab975","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5472154-a61c-427a-be8d-43407bb6e137","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5472154-a61c-427a-be8d-43407bb6e137","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049014,"nanos":787538527},"http":{"id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SXGJXQHxxuwxh4hm_NAIDbqI1VwH01FqlptZnt6bXBljgOngar7u6J7cj02C"}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SXGJXQHxxuwxh4hm_NAIDbqI1VwH01FqlptZnt6bXBljgOngar7u6J7cj02C\"}"}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"398dbaa3-cceb-4c95-b2e7-e9a3da8af794","keyName":"e2e-rate-a-cab975","subscription":"e2e-rate-iso-a-cab975","tenant":"e2e-shared-a-2f2de5","userId":"398dbaa3-cceb-4c95-b2e7-e9a3da8af794","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-cab975\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cab975","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cab975"}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"398dbaa3-cceb-4c95-b2e7-e9a3da8af794","keyName":"e2e-rate-a-cab975","selected_subscription":"e2e-rate-iso-a-cab975","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-cab975@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cab975","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d77f745-3869-45d2-9ed0-80ef57e3140e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50156","PortSpecifier":{"PortValue":50156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23de5857-4cec-4ce6-86e4-70a2c9658330","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50156","PortSpecifier":{"PortValue":50156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049015,"nanos":827316518},"http":{"id":"23de5857-4cec-4ce6-86e4-70a2c9658330","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SXGJXQHxxuwxh4hm_NAIDbqI1VwH01FqlptZnt6bXBljgOngar7u6J7cj02C"}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SXGJXQHxxuwxh4hm_NAIDbqI1VwH01FqlptZnt6bXBljgOngar7u6J7cj02C\"}"}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"398dbaa3-cceb-4c95-b2e7-e9a3da8af794","keyName":"e2e-rate-a-cab975","subscription":"e2e-rate-iso-a-cab975","tenant":"e2e-shared-a-2f2de5","userId":"398dbaa3-cceb-4c95-b2e7-e9a3da8af794","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-cab975\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cab975","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cab975"}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"398dbaa3-cceb-4c95-b2e7-e9a3da8af794","keyName":"e2e-rate-a-cab975","selected_subscription":"e2e-rate-iso-a-cab975","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-cab975@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cab975","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23de5857-4cec-4ce6-86e4-70a2c9658330","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50162","PortSpecifier":{"PortValue":50162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44d131b7-08d6-472d-8b45-fa725bafbe39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50162","PortSpecifier":{"PortValue":50162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049022,"nanos":543621666},"http":{"id":"44d131b7-08d6-472d-8b45-fa725bafbe39","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d131b7-08d6-472d-8b45-fa725bafbe39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34796","PortSpecifier":{"PortValue":34796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34796","PortSpecifier":{"PortValue":34796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049022,"nanos":578325706},"http":{"id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"]}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c72f91dbedb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27612792-04ca-440d-bedf-6676b66373b7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"05ebcb56-9578-497b-a81c-a4ff27ecd837","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/rate-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50c2ac6b-6019-41ec-bf63-5e48fd1713cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50172","PortSpecifier":{"PortValue":50172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50172","PortSpecifier":{"PortValue":50172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049022,"nanos":614413968},"http":{"id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebc43c9e-a7df-4ff4-bf40-5f8665949944","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35596","PortSpecifier":{"PortValue":35596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"630d59c3-2ace-4570-b9ba-f01fc537c979","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35596","PortSpecifier":{"PortValue":35596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049023,"nanos":653508633},"http":{"id":"630d59c3-2ace-4570-b9ba-f01fc537c979","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"630d59c3-2ace-4570-b9ba-f01fc537c979","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35610","PortSpecifier":{"PortValue":35610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35610","PortSpecifier":{"PortValue":35610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049024,"nanos":690168089},"http":{"id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7caaa293-8894-4a4e-8f0c-3544f8a6ae1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35626","PortSpecifier":{"PortValue":35626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35626","PortSpecifier":{"PortValue":35626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049025,"nanos":732762176},"http":{"id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cc7bb61-7ecc-4c76-b160-8c1526ab3c0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35642","PortSpecifier":{"PortValue":35642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35642","PortSpecifier":{"PortValue":35642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049026,"nanos":768081679},"http":{"id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc532ec3-7702-498b-a50f-8bd314fd1f97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35652","PortSpecifier":{"PortValue":35652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9a186e2-d14d-4898-9197-b8b89942778c","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35652","PortSpecifier":{"PortValue":35652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049027,"nanos":800890541},"http":{"id":"a9a186e2-d14d-4898-9197-b8b89942778c","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9a186e2-d14d-4898-9197-b8b89942778c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35654","PortSpecifier":{"PortValue":35654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35654","PortSpecifier":{"PortValue":35654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049028,"nanos":839273681},"http":{"id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00307532-a4ec-4156-b0e0-33fdfa0f49f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35662","PortSpecifier":{"PortValue":35662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35662","PortSpecifier":{"PortValue":35662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049029,"nanos":875651797},"http":{"id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3d08201-34f4-44fd-a2f1-ffd786c7dff3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78172924-0706-43cd-9566-8606e75b2ae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35666","PortSpecifier":{"PortValue":35666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78172924-0706-43cd-9566-8606e75b2ae4","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78172924-0706-43cd-9566-8606e75b2ae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35666","PortSpecifier":{"PortValue":35666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049030,"nanos":912289312},"http":{"id":"78172924-0706-43cd-9566-8606e75b2ae4","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78172924-0706-43cd-9566-8606e75b2ae4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78172924-0706-43cd-9566-8606e75b2ae4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78172924-0706-43cd-9566-8606e75b2ae4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78172924-0706-43cd-9566-8606e75b2ae4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35670","PortSpecifier":{"PortValue":35670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","method":"POST","path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions","host":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35670","PortSpecifier":{"PortValue":35670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049031,"nanos":948938712},"http":{"id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","method":"POST","headers":{":authority":"e2e-shared-a-2f2de5.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-P34a2iRcICbCy32e_DWMoaLDleWcC9GMJbBhATRERghuXkxtX5hr8FgS5lkD\"}"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","subscription":"e2e-rate-iso-a-2379b2","tenant":"e2e-shared-a-2f2de5","userId":"37c1bc50-4008-4f2b-874a-638085263a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\",\"requestedSubscription\":\"e2e-rate-iso-a-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2f2de5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"37c1bc50-4008-4f2b-874a-638085263a79","keyName":"e2e-rate-a-2379b2","selected_subscription":"e2e-rate-iso-a-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-a-2f2de5/e2e-rate-iso-a-2379b2@ai-tenant-e2e-shared-a-2f2de5/rate-test-model-2f2de5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2f2de5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2379b2","namespace":"ai-tenant-e2e-shared-a-2f2de5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7df27273-a5f6-49d5-965b-dac0ffe4886d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57442","PortSpecifier":{"PortValue":57442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","method":"POST","path":"/ai-tenant-e2e-shared-b-21db6d/rate-test-model-21db6d/v1/completions","host":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57442","PortSpecifier":{"PortValue":57442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784049031,"nanos":980528004},"http":{"id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","method":"POST","headers":{":authority":"e2e-shared-b-21db6d.apps.b663afa2-06d7-46a8-8c12-5c72f91dbedb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-21db6d/rate-test-model-21db6d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EVduft6bQM9gMKyb_kTuEnTHeZtiZYYl2gHOR7Ql2ZjkO0F3tuR1gV4JTtf5"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EVduft6bQM9gMKyb_kTuEnTHeZtiZYYl2gHOR7Ql2ZjkO0F3tuR1gV4JTtf5\"}"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d1eb3aa-eb10-47ce-8b24-64f567beffa7","keyName":"e2e-rate-b-2379b2","subscription":"e2e-rate-iso-b-2379b2","tenant":"e2e-shared-b-21db6d","userId":"9d1eb3aa-eb10-47ce-8b24-64f567beffa7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-21db6d/rate-test-model-21db6d\",\"requestedSubscription\":\"e2e-rate-iso-b-2379b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21db6d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21db6d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-2379b2","namespace":"ai-tenant-e2e-shared-b-21db6d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21db6d/rate-test-model-21db6d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-2379b2"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d1eb3aa-eb10-47ce-8b24-64f567beffa7","keyName":"e2e-rate-b-2379b2","selected_subscription":"e2e-rate-iso-b-2379b2","selected_subscription_key":"ai-tenant-e2e-shared-b-21db6d/e2e-rate-iso-b-2379b2@ai-tenant-e2e-shared-b-21db6d/rate-test-model-21db6d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21db6d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-2379b2","namespace":"ai-tenant-e2e-shared-b-21db6d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T17:10:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4316360c-bbf3-46e5-ad00-f862b25aa46e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1402a46ce2613ebe09a5f5b710edc3b4972d440c7d3a76ff0c5cb8cb300bd2fd"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/353758c799afc93ec1731b1c78b1897c68dd37d36093dfe4c12f7ae5bbe27146"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af34c5b19e8f266c7cd375db482d2b615d8945ba7291b9f168f422a85a1ec801"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/958a8c3cf55c0d34e2615f182c8dc700c4a5a42725a2089c2ecebbb8bcedb0eb"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2bc998360d5d0d545999cae9a5c9506138be3bae098d12f62ff3b4df3f7d37"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3cffc85d4b765a8524537e199763c2c8dae7553840fe206faa2085ba4be44b3"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec95616c0099f2cd714fdc5dc840f003dfa607c4020099307495589a6b46a8f4"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c71fb7ad1d7f8d0a20942e9e648437951fae032b6ae661491d25e34756ce9232"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8e11f407746823b968ea1e27d06b9c8c4ecb119439729a30e2044c2eb2c6981"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2effb9233dcc431132b9a0495308946474d81723d70b7fa0a97b19ba958e9eee"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd1bd3a088db77c2f05d20faa40154cb94ff806f586bc202f5d9dd721e0f3ccd"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c0464b4db5421b41a5ff5f6b36b368eb7e3f10795411b4832f8372a757eba02"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bb6d9ce536333c775a9cd3d273d136c8acb961c1e2e62e53e84f1951c69db7b"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/923781ebe5a565407abfa33659ba6de25b45ee090f3a12b3583a7c276391a3b2"}
{"level":"info","ts":"2026-07-14T17:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8f909e41b1b87af176bef39f0e05bffe4aff02eee3280d29766c6322427fd54"}
{"level":"info","ts":"2026-07-14T17:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b5ef911e218b466fa34e5eb24b289be9e7e51098438c95895a3bcaa99104bd7"}
{"level":"info","ts":"2026-07-14T17:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f26f5ffad4be06c5d4cefb7ba129f0b9ff920751646ea06107011c4b9fb04ee"}
{"level":"info","ts":"2026-07-14T17:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ef7731de46175be3ba869167a82d293f1ed58341f5bea4a41038b1ed6393869"}
{"level":"info","ts":"2026-07-14T17:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c7a3456e989079a2c5134e88ebb793c8cc51db4250c7f28d6f3c3881f026b4d"}
{"level":"info","ts":"2026-07-14T17:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50898c9231ce1a73c327d10a380dd6ca851413f246a9446c890a031a2205de49"}