{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b483bd3d0eab89cdb19ed26ebbe31df7f673f178a0da8a7b784a1e6724d4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f865f318aef0a52f12e78950e02b8fc5795c282a58b2a995a6aaecb730a879c5"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0df7022751fbeaa1a645a2ad4f171e32a71303f155515a138235d6d436f7788"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f8f2715137fa8a499343f964f10f6756fc6aab47a7e6467d09e68dab6c813fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4d695ee88657ff34934afdf6a2599eede04b999b0a910cad4ff641426d50b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2d84e163968717956f8667b3906bfef5b5c14a3089ac9cc77437008fce8d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f865f318aef0a52f12e78950e02b8fc5795c282a58b2a995a6aaecb730a879c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f865f318aef0a52f12e78950e02b8fc5795c282a58b2a995a6aaecb730a879c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f865f318aef0a52f12e78950e02b8fc5795c282a58b2a995a6aaecb730a879c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0df7022751fbeaa1a645a2ad4f171e32a71303f155515a138235d6d436f7788","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f865f318aef0a52f12e78950e02b8fc5795c282a58b2a995a6aaecb730a879c5"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f865f318aef0a52f12e78950e02b8fc5795c282a58b2a995a6aaecb730a879c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:22:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:22:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c"}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c"}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c"}
{"level":"error","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33022","PortSpecifier":{"PortValue":33022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38a55b91-28af-46a6-bffe-54c1df66e50a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33022","PortSpecifier":{"PortValue":33022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665362,"nanos":544310049},"http":{"id":"38a55b91-28af-46a6-bffe-54c1df66e50a","method":"POST","headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1dd068b5-8a6d-4d49-a07a-71cd0b99a664","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=caaa0b22-67ba-44f3-8d24-1163dee53d3a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/41bbe6aa6e85"]}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/41bbe6aa6e85"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=caaa0b22-67ba-44f3-8d24-1163dee53d3a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1dd068b5-8a6d-4d49-a07a-71cd0b99a664","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"42ed7a1955da4aedc4fdc143443260bdc59596a9ae633dda973385010d904a09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-065403/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38a55b91-28af-46a6-bffe-54c1df66e50a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43214","PortSpecifier":{"PortValue":43214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-464ec4.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43214","PortSpecifier":{"PortValue":43214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665362,"nanos":588454782},"http":{"id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","method":"POST","headers":{":authority":"e2e-shared-b-464ec4.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1dd068b5-8a6d-4d49-a07a-71cd0b99a664","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=caaa0b22-67ba-44f3-8d24-1163dee53d3a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/41bbe6aa6e85"]}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/41bbe6aa6e85"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=caaa0b22-67ba-44f3-8d24-1163dee53d3a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1dd068b5-8a6d-4d49-a07a-71cd0b99a664","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-464ec4.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-464ec4/rate-test-model-464ec4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-464ec4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"400a34f5-f92e-4c12-9df4-8ac57c16243b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","method":"POST","path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions","host":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665362,"nanos":630493150},"http":{"id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","method":"POST","headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ypKrb094YUp9BZyA_TPu0m9ScFeFqEImkZsincc75oVTioth7nTOW600K4Yp"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ypKrb094YUp9BZyA_TPu0m9ScFeFqEImkZsincc75oVTioth7nTOW600K4Yp\"}"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2103cb9e-ba32-4ea8-b412-928e1e813d15","keyName":"e2e-rate-a-bfde4c","subscription":"e2e-rate-iso-a-bfde4c","tenant":"e2e-shared-a-065403","userId":"2103cb9e-ba32-4ea8-b412-928e1e813d15","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\",\"requestedSubscription\":\"e2e-rate-iso-a-bfde4c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfde4c","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-065403/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bfde4c"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2103cb9e-ba32-4ea8-b412-928e1e813d15","keyName":"e2e-rate-a-bfde4c","selected_subscription":"e2e-rate-iso-a-bfde4c","selected_subscription_key":"ai-tenant-e2e-shared-a-065403/e2e-rate-iso-a-bfde4c@ai-tenant-e2e-shared-a-065403/rate-test-model-065403","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfde4c","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:22:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e2242d-e564-4a0d-9557-01bcb7c8c09f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33030","PortSpecifier":{"PortValue":33030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","method":"POST","path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions","host":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33030","PortSpecifier":{"PortValue":33030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665363,"nanos":697946391},"http":{"id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","method":"POST","headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ypKrb094YUp9BZyA_TPu0m9ScFeFqEImkZsincc75oVTioth7nTOW600K4Yp"}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ypKrb094YUp9BZyA_TPu0m9ScFeFqEImkZsincc75oVTioth7nTOW600K4Yp\"}"}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2103cb9e-ba32-4ea8-b412-928e1e813d15","keyName":"e2e-rate-a-bfde4c","subscription":"e2e-rate-iso-a-bfde4c","tenant":"e2e-shared-a-065403","userId":"2103cb9e-ba32-4ea8-b412-928e1e813d15","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\",\"requestedSubscription\":\"e2e-rate-iso-a-bfde4c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfde4c","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"}}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-065403/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bfde4c"}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2103cb9e-ba32-4ea8-b412-928e1e813d15","keyName":"e2e-rate-a-bfde4c","selected_subscription":"e2e-rate-iso-a-bfde4c","selected_subscription_key":"ai-tenant-e2e-shared-a-065403/e2e-rate-iso-a-bfde4c@ai-tenant-e2e-shared-a-065403/rate-test-model-065403","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfde4c","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:22:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28f7a5ba-309c-4ba0-b9ed-303972cce0e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33034","PortSpecifier":{"PortValue":33034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","method":"POST","path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions","host":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33034","PortSpecifier":{"PortValue":33034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665364,"nanos":740054186},"http":{"id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","method":"POST","headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ypKrb094YUp9BZyA_TPu0m9ScFeFqEImkZsincc75oVTioth7nTOW600K4Yp"}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ypKrb094YUp9BZyA_TPu0m9ScFeFqEImkZsincc75oVTioth7nTOW600K4Yp\"}"}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2103cb9e-ba32-4ea8-b412-928e1e813d15","keyName":"e2e-rate-a-bfde4c","subscription":"e2e-rate-iso-a-bfde4c","tenant":"e2e-shared-a-065403","userId":"2103cb9e-ba32-4ea8-b412-928e1e813d15","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\",\"requestedSubscription\":\"e2e-rate-iso-a-bfde4c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfde4c","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"}}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-065403/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bfde4c"}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2103cb9e-ba32-4ea8-b412-928e1e813d15","keyName":"e2e-rate-a-bfde4c","selected_subscription":"e2e-rate-iso-a-bfde4c","selected_subscription_key":"ai-tenant-e2e-shared-a-065403/e2e-rate-iso-a-bfde4c@ai-tenant-e2e-shared-a-065403/rate-test-model-065403","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfde4c","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:22:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5108c5b5-c216-4f71-b24f-cb68ca632c20","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52d6128317646323145b6f3a17d8af9b8ebddf2e850c1db92a565989b9a1cb64"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"}
{"level":"info","ts":"2026-07-21T20:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a"}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"error","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"debug","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"}
{"level":"error","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"}
{"level":"error","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"}
{"level":"error","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d6128317646323145b6f3a17d8af9b8ebddf2e850c1db92a565989b9a1cb64"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52d6128317646323145b6f3a17d8af9b8ebddf2e850c1db92a565989b9a1cb64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52d6128317646323145b6f3a17d8af9b8ebddf2e850c1db92a565989b9a1cb64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52d6128317646323145b6f3a17d8af9b8ebddf2e850c1db92a565989b9a1cb64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52d6128317646323145b6f3a17d8af9b8ebddf2e850c1db92a565989b9a1cb64"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T20:23:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52d6128317646323145b6f3a17d8af9b8ebddf2e850c1db92a565989b9a1cb64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T20:23:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3"}
{"level":"info","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36e3e1ef-2343-4937-8726-637856752866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56908","PortSpecifier":{"PortValue":56908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36e3e1ef-2343-4937-8726-637856752866","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36e3e1ef-2343-4937-8726-637856752866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56908","PortSpecifier":{"PortValue":56908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665382,"nanos":130450599},"http":{"id":"36e3e1ef-2343-4937-8726-637856752866","method":"POST","headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36e3e1ef-2343-4937-8726-637856752866","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36e3e1ef-2343-4937-8726-637856752866","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1dd068b5-8a6d-4d49-a07a-71cd0b99a664","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=caaa0b22-67ba-44f3-8d24-1163dee53d3a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/41bbe6aa6e85"]}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36e3e1ef-2343-4937-8726-637856752866","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/41bbe6aa6e85"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=caaa0b22-67ba-44f3-8d24-1163dee53d3a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1dd068b5-8a6d-4d49-a07a-71cd0b99a664","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"42ed7a1955da4aedc4fdc143443260bdc59596a9ae633dda973385010d904a09"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e3e1ef-2343-4937-8726-637856752866","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e3e1ef-2343-4937-8726-637856752866","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36e3e1ef-2343-4937-8726-637856752866","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-065403/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36e3e1ef-2343-4937-8726-637856752866","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36e3e1ef-2343-4937-8726-637856752866","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36e3e1ef-2343-4937-8726-637856752866","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36e3e1ef-2343-4937-8726-637856752866","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36e3e1ef-2343-4937-8726-637856752866","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54606","PortSpecifier":{"PortValue":54606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-464ec4.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54606","PortSpecifier":{"PortValue":54606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665382,"nanos":171875923},"http":{"id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","method":"POST","headers":{":authority":"e2e-shared-b-464ec4.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1dd068b5-8a6d-4d49-a07a-71cd0b99a664","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=caaa0b22-67ba-44f3-8d24-1163dee53d3a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/41bbe6aa6e85"]}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/41bbe6aa6e85"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=caaa0b22-67ba-44f3-8d24-1163dee53d3a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1dd068b5-8a6d-4d49-a07a-71cd0b99a664","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-464ec4.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-464ec4/rate-test-model-464ec4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-464ec4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efa56e31-45fc-4a8f-ace4-1064f615e30c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56920","PortSpecifier":{"PortValue":56920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f72beb3a-895a-408d-b5b8-a706b4f88582","method":"POST","path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions","host":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56920","PortSpecifier":{"PortValue":56920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665382,"nanos":214678493},"http":{"id":"f72beb3a-895a-408d-b5b8-a706b4f88582","method":"POST","headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O8gERzABGjbMIBCL_LXbNFxOIfAME70Uot7qv68inorLD9xsSGQAak0VMx2u"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O8gERzABGjbMIBCL_LXbNFxOIfAME70Uot7qv68inorLD9xsSGQAak0VMx2u\"}"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66359137-8f85-401a-ae3b-a3b331c96946","keyName":"e2e-rate-a-e6cedb","subscription":"e2e-rate-iso-a-e6cedb","tenant":"e2e-shared-a-065403","userId":"66359137-8f85-401a-ae3b-a3b331c96946","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\",\"requestedSubscription\":\"e2e-rate-iso-a-e6cedb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6cedb","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-065403/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e6cedb"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66359137-8f85-401a-ae3b-a3b331c96946","keyName":"e2e-rate-a-e6cedb","selected_subscription":"e2e-rate-iso-a-e6cedb","selected_subscription_key":"ai-tenant-e2e-shared-a-065403/e2e-rate-iso-a-e6cedb@ai-tenant-e2e-shared-a-065403/rate-test-model-065403","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6cedb","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:23:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f72beb3a-895a-408d-b5b8-a706b4f88582","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56922","PortSpecifier":{"PortValue":56922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab0a71c2-b1be-40be-b065-b8c210a80205","method":"POST","path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions","host":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56922","PortSpecifier":{"PortValue":56922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665383,"nanos":253445537},"http":{"id":"ab0a71c2-b1be-40be-b065-b8c210a80205","method":"POST","headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O8gERzABGjbMIBCL_LXbNFxOIfAME70Uot7qv68inorLD9xsSGQAak0VMx2u"}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O8gERzABGjbMIBCL_LXbNFxOIfAME70Uot7qv68inorLD9xsSGQAak0VMx2u\"}"}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66359137-8f85-401a-ae3b-a3b331c96946","keyName":"e2e-rate-a-e6cedb","subscription":"e2e-rate-iso-a-e6cedb","tenant":"e2e-shared-a-065403","userId":"66359137-8f85-401a-ae3b-a3b331c96946","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\",\"requestedSubscription\":\"e2e-rate-iso-a-e6cedb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6cedb","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"}}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-065403/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e6cedb"}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66359137-8f85-401a-ae3b-a3b331c96946","keyName":"e2e-rate-a-e6cedb","selected_subscription":"e2e-rate-iso-a-e6cedb","selected_subscription_key":"ai-tenant-e2e-shared-a-065403/e2e-rate-iso-a-e6cedb@ai-tenant-e2e-shared-a-065403/rate-test-model-065403","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6cedb","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:23:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab0a71c2-b1be-40be-b065-b8c210a80205","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56930","PortSpecifier":{"PortValue":56930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a7231ed-6180-4360-8136-8ad8fb93471e","method":"POST","path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions","host":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56930","PortSpecifier":{"PortValue":56930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665384,"nanos":299757956},"http":{"id":"1a7231ed-6180-4360-8136-8ad8fb93471e","method":"POST","headers":{":authority":"e2e-shared-a-065403.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-065403/rate-test-model-065403/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O8gERzABGjbMIBCL_LXbNFxOIfAME70Uot7qv68inorLD9xsSGQAak0VMx2u"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O8gERzABGjbMIBCL_LXbNFxOIfAME70Uot7qv68inorLD9xsSGQAak0VMx2u\"}"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66359137-8f85-401a-ae3b-a3b331c96946","keyName":"e2e-rate-a-e6cedb","subscription":"e2e-rate-iso-a-e6cedb","tenant":"e2e-shared-a-065403","userId":"66359137-8f85-401a-ae3b-a3b331c96946","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\",\"requestedSubscription\":\"e2e-rate-iso-a-e6cedb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-065403.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6cedb","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-065403/rate-test-model-065403\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-065403/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e6cedb"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66359137-8f85-401a-ae3b-a3b331c96946","keyName":"e2e-rate-a-e6cedb","selected_subscription":"e2e-rate-iso-a-e6cedb","selected_subscription_key":"ai-tenant-e2e-shared-a-065403/e2e-rate-iso-a-e6cedb@ai-tenant-e2e-shared-a-065403/rate-test-model-065403","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-065403","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6cedb","namespace":"ai-tenant-e2e-shared-a-065403","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-065403/rate-test-model-065403"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a7231ed-6180-4360-8136-8ad8fb93471e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62f879e0-146c-422d-94db-f8d037ef9234","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54610","PortSpecifier":{"PortValue":54610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62f879e0-146c-422d-94db-f8d037ef9234","method":"POST","path":"/ai-tenant-e2e-shared-b-464ec4/rate-test-model-464ec4/v1/completions","host":"e2e-shared-b-464ec4.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62f879e0-146c-422d-94db-f8d037ef9234","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54610","PortSpecifier":{"PortValue":54610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784665384,"nanos":344554143},"http":{"id":"62f879e0-146c-422d-94db-f8d037ef9234","method":"POST","headers":{":authority":"e2e-shared-b-464ec4.apps.707a5eda-cf69-433c-ab34-41bbe6aa6e85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-464ec4/rate-test-model-464ec4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JBdqs2uIMZqwEFgU_oy5nrOjXgbezwZIJ6FbZol4qw09rJRZDTOTYEcYuvW"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-464ec4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JBdqs2uIMZqwEFgU_oy5nrOjXgbezwZIJ6FbZol4qw09rJRZDTOTYEcYuvW\"}"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-464ec4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab398ca2-821b-4e9d-859d-6e8e4107ad37","keyName":"e2e-rate-b-e6cedb","subscription":"e2e-rate-iso-b-e6cedb","tenant":"e2e-shared-b-464ec4","userId":"ab398ca2-821b-4e9d-859d-6e8e4107ad37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-464ec4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-464ec4/rate-test-model-464ec4\",\"requestedSubscription\":\"e2e-rate-iso-b-e6cedb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-464ec4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-464ec4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e6cedb","namespace":"ai-tenant-e2e-shared-b-464ec4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-464ec4/rate-test-model-464ec4"}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62f879e0-146c-422d-94db-f8d037ef9234","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-464ec4/rate-test-model-464ec4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-464ec4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e6cedb"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f879e0-146c-422d-94db-f8d037ef9234","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab398ca2-821b-4e9d-859d-6e8e4107ad37","keyName":"e2e-rate-b-e6cedb","selected_subscription":"e2e-rate-iso-b-e6cedb","selected_subscription_key":"ai-tenant-e2e-shared-b-464ec4/e2e-rate-iso-b-e6cedb@ai-tenant-e2e-shared-b-464ec4/rate-test-model-464ec4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-464ec4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e6cedb","namespace":"ai-tenant-e2e-shared-b-464ec4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-464ec4/rate-test-model-464ec4"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62f879e0-146c-422d-94db-f8d037ef9234","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T20:23:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62f879e0-146c-422d-94db-f8d037ef9234","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f8c572f5ae007ea90eb3345cef0c74b613087a9039f6b5755cc113f2f0bdc19"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d9e945af5ca506bde7bee9c4f0d460c29d8dc0f079d3ebb2001a01e103906ab"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa7defc8049320ed3bb925d8caa2a51e8e659becc10e52b0adbc30f1b4217b4c"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52d6128317646323145b6f3a17d8af9b8ebddf2e850c1db92a565989b9a1cb64"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f8f2715137fa8a499343f964f10f6756fc6aab47a7e6467d09e68dab6c813fb"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d9c244d768b357c2a79894dfb75856e7a542dd4d2ce73c40bc6d09f6ad301be"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e2d84e163968717956f8667b3906bfef5b5c14a3089ac9cc77437008fce8d0b"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e88527d5cdceae79f0d95c939127de1479b3ab7c176e26af3ab92cf8fa7beea"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af4b2c06f3756363c1a5bf147c4fcc4bd5fb7b5cad1942ed74df0b924792478"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8b6a9bf10bee545c7a92a599d86cceb55ab6e5d5caa295bad2e0f14425761e3"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9798048baa03df5870f8114b5a97b392761e01a5d2550ab122578d6656b0c4f1"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3861a31ab1d59f0bd532193ce52d635563222add911c8f0102848591e72d3ae"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fe2a1b18ec9c925110f2fc7d7ecd34b40688311144be42ef5620e077c12a9f9"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99916db71c3cb7adecd749d8921e7e9db12473239be717dc9bf53110156be191"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7b483bd3d0eab89cdb19ed26ebbe31df7f673f178a0da8a7b784a1e6724d4c4"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35fd6fa6696155883ae099130a7d4c62d867ed14a0cad428c5ae73f982189e3f"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42ed7a1955da4aedc4fdc143443260bdc59596a9ae633dda973385010d904a09"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/221bbf5261cc5c826d0264545f1e6b41f310188c057c022093e3fa956284082f"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bad447ab117f01604b182c18f137549a71bd9857f050ccf2e0259759b2b128a"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d01003428fc91d44669c7843a7c1ca55f3573b8a306646547d3d73be58238444"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0df7022751fbeaa1a645a2ad4f171e32a71303f155515a138235d6d436f7788"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65e83675deb4f4b0bee4a7c5368caeeb76cdf09c24b6c095dcbff602830799cd"}
{"level":"info","ts":"2026-07-21T20:23:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f865f318aef0a52f12e78950e02b8fc5795c282a58b2a995a6aaecb730a879c5"}
{"level":"info","ts":"2026-07-21T20:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e4d695ee88657ff34934afdf6a2599eede04b999b0a910cad4ff641426d50b7"}