--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e43b4fd715439f249992454eb844edc81bd9b6babe0b1434f5098381e55854","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e43b4fd715439f249992454eb844edc81bd9b6babe0b1434f5098381e55854"}
{"level":"debug","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"}
{"level":"debug","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"}
{"level":"debug","ts":"2026-07-08T03:59:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193"}
{"level":"error","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d"}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030"}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T03:59:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530"}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957"}
{"level":"debug","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T03:59:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530"}
{"level":"debug","ts":"2026-07-08T03:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T03:59:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T03:59:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T03:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T03:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T03:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530"}
{"level":"info","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57472","PortSpecifier":{"PortValue":57472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57472","PortSpecifier":{"PortValue":57472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483146,"nanos":843003554},"http":{"id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28ae0697-4e85-4c8d-b960-4a2a051f921e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37224","PortSpecifier":{"PortValue":37224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37224","PortSpecifier":{"PortValue":37224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483146,"nanos":906403208},"http":{"id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/auth-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35d30d6b-f844-4153-ba5d-fd22812e2b6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89768548-dc76-45a2-98a4-18b61af08e18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57480","PortSpecifier":{"PortValue":57480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89768548-dc76-45a2-98a4-18b61af08e18","method":"GET","path":"/maas-api/v1/api-keys/d1183316-5e64-4e9f-951f-c2d82b949495","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89768548-dc76-45a2-98a4-18b61af08e18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57480","PortSpecifier":{"PortValue":57480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483146,"nanos":991492083},"http":{"id":"89768548-dc76-45a2-98a4-18b61af08e18","method":"GET","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d1183316-5e64-4e9f-951f-c2d82b949495",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89768548-dc76-45a2-98a4-18b61af08e18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89768548-dc76-45a2-98a4-18b61af08e18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89768548-dc76-45a2-98a4-18b61af08e18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d1183316-5e64-4e9f-951f-c2d82b949495",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89768548-dc76-45a2-98a4-18b61af08e18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89768548-dc76-45a2-98a4-18b61af08e18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89768548-dc76-45a2-98a4-18b61af08e18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89768548-dc76-45a2-98a4-18b61af08e18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89768548-dc76-45a2-98a4-18b61af08e18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89768548-dc76-45a2-98a4-18b61af08e18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89768548-dc76-45a2-98a4-18b61af08e18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89768548-dc76-45a2-98a4-18b61af08e18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37234","PortSpecifier":{"PortValue":37234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","method":"GET","path":"/maas-api/v1/api-keys/dc887910-62b7-4a87-9be7-8a04ea0f9f3f","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37234","PortSpecifier":{"PortValue":37234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483147,"nanos":27054038},"http":{"id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","method":"GET","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc887910-62b7-4a87-9be7-8a04ea0f9f3f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc887910-62b7-4a87-9be7-8a04ea0f9f3f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/auth-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb83a02a-59bc-4c29-9ede-ba55aa7feb6d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52598","PortSpecifier":{"PortValue":52598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f29ebbf-6156-49be-b455-93408e94c60e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52598","PortSpecifier":{"PortValue":52598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483164,"nanos":53745651},"http":{"id":"1f29ebbf-6156-49be-b455-93408e94c60e","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f29ebbf-6156-49be-b455-93408e94c60e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52108","PortSpecifier":{"PortValue":52108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dd7321b-d624-40d3-ad45-3001aafdb862","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52108","PortSpecifier":{"PortValue":52108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483164,"nanos":91869023},"http":{"id":"8dd7321b-d624-40d3-ad45-3001aafdb862","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/auth-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dd7321b-d624-40d3-ad45-3001aafdb862","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52602","PortSpecifier":{"PortValue":52602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52602","PortSpecifier":{"PortValue":52602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483164,"nanos":130401486},"http":{"id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","method":"GET","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vaECrA4g1IimhutB_nO2tfpTJqMci7Y6zsBLh646K2FfGXF1TpU4bgnyEHk8"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vaECrA4g1IimhutB_nO2tfpTJqMci7Y6zsBLh646K2FfGXF1TpU4bgnyEHk8\"}"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"279ccf75-c14b-45ee-a52f-07c35001143c","keyName":"e2e-auth-iso-a-5cf291","subscription":"e2e-auth-iso-c9afe1","tenant":"e2e-shared-a-e356c0","userId":"279ccf75-c14b-45ee-a52f-07c35001143c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c9afe1"}
{"level":"info","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e17ff17-7f24-479f-b291-e3dc6d5bc92b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44916","PortSpecifier":{"PortValue":44916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44916","PortSpecifier":{"PortValue":44916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483181,"nanos":178565563},"http":{"id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bacc8216-80a0-4700-a6dc-8ece7db03ba6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58356","PortSpecifier":{"PortValue":58356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62392109-4aa3-41e9-9148-19280dce9c8a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58356","PortSpecifier":{"PortValue":58356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483181,"nanos":220657979},"http":{"id":"62392109-4aa3-41e9-9148-19280dce9c8a","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/auth-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62392109-4aa3-41e9-9148-19280dce9c8a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58358","PortSpecifier":{"PortValue":58358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58358","PortSpecifier":{"PortValue":58358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483181,"nanos":258291596},"http":{"id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","method":"GET","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JMjW26GqcF6aJU8M_dQpjtALnnDzd3guSNU3xnt6uZnGia6PKlhab3RZWmrr"}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JMjW26GqcF6aJU8M_dQpjtALnnDzd3guSNU3xnt6uZnGia6PKlhab3RZWmrr\"}"}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-08T03:59:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa70f7cb-e19a-47ef-a016-06a42c2f5bc4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46068","PortSpecifier":{"PortValue":46068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46068","PortSpecifier":{"PortValue":46068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483198,"nanos":286812509},"http":{"id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71eca1f0-dd7d-45a6-ad78-0b7f73da6cfc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58402","PortSpecifier":{"PortValue":58402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58402","PortSpecifier":{"PortValue":58402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483198,"nanos":319930483},"http":{"id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/auth-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"473fd1ad-e095-47df-81e8-328d53b0ffe8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46076","PortSpecifier":{"PortValue":46076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46076","PortSpecifier":{"PortValue":46076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483198,"nanos":352215411},"http":{"id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7b5f5d7-ab93-4d05-bc00-abe3f2ae05a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58408","PortSpecifier":{"PortValue":58408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25a331cc-853d-4438-b802-3c8f8aba06ac","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58408","PortSpecifier":{"PortValue":58408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483198,"nanos":389021972},"http":{"id":"25a331cc-853d-4438-b802-3c8f8aba06ac","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/auth-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T03:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25a331cc-853d-4438-b802-3c8f8aba06ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"914f7764-edea-4af4-be7c-65b276911d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38432","PortSpecifier":{"PortValue":38432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"914f7764-edea-4af4-be7c-65b276911d52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"914f7764-edea-4af4-be7c-65b276911d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38432","PortSpecifier":{"PortValue":38432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483215,"nanos":420799234},"http":{"id":"914f7764-edea-4af4-be7c-65b276911d52","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"914f7764-edea-4af4-be7c-65b276911d52","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"914f7764-edea-4af4-be7c-65b276911d52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"914f7764-edea-4af4-be7c-65b276911d52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"914f7764-edea-4af4-be7c-65b276911d52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"914f7764-edea-4af4-be7c-65b276911d52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"914f7764-edea-4af4-be7c-65b276911d52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"914f7764-edea-4af4-be7c-65b276911d52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"914f7764-edea-4af4-be7c-65b276911d52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"914f7764-edea-4af4-be7c-65b276911d52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"914f7764-edea-4af4-be7c-65b276911d52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"914f7764-edea-4af4-be7c-65b276911d52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39948","PortSpecifier":{"PortValue":39948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5d688f1-3886-4616-99ec-d295dca90a47","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39948","PortSpecifier":{"PortValue":39948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483215,"nanos":462474042},"http":{"id":"d5d688f1-3886-4616-99ec-d295dca90a47","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/auth-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5d688f1-3886-4616-99ec-d295dca90a47","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39962","PortSpecifier":{"PortValue":39962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","method":"GET","path":"/maas-api/v1/api-keys/c544f788-ce67-4d2d-aecb-ba7b8c14f1ea","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39962","PortSpecifier":{"PortValue":39962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483215,"nanos":499112590},"http":{"id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","method":"GET","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c544f788-ce67-4d2d-aecb-ba7b8c14f1ea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c544f788-ce67-4d2d-aecb-ba7b8c14f1ea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/auth-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"238ab840-c7f1-4162-84dc-1893b0fed4bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38436","PortSpecifier":{"PortValue":38436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","method":"GET","path":"/maas-api/v1/api-keys/c544f788-ce67-4d2d-aecb-ba7b8c14f1ea","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38436","PortSpecifier":{"PortValue":38436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483215,"nanos":529916222},"http":{"id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","method":"GET","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c544f788-ce67-4d2d-aecb-ba7b8c14f1ea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c544f788-ce67-4d2d-aecb-ba7b8c14f1ea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e002ebd-3666-41e3-94eb-4d94d76b6671","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46272","PortSpecifier":{"PortValue":46272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5838f48b-5b90-4abf-9133-e127c5d130ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46272","PortSpecifier":{"PortValue":46272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483232,"nanos":569741085},"http":{"id":"5838f48b-5b90-4abf-9133-e127c5d130ac","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5838f48b-5b90-4abf-9133-e127c5d130ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51566","PortSpecifier":{"PortValue":51566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51566","PortSpecifier":{"PortValue":51566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483232,"nanos":611369923},"http":{"id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/auth-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae8c2132-6cf2-41f8-ba62-c9ad5961a8b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46276","PortSpecifier":{"PortValue":46276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b33543b6-8aaf-47fc-8143-d42b959f3492","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46276","PortSpecifier":{"PortValue":46276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483232,"nanos":648193942},"http":{"id":"b33543b6-8aaf-47fc-8143-d42b959f3492","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3iWWbtKc5gbgEfxL_MIK4UBZE4VXYzaPzgJhyDOPz8nM0rpwTUVGRK0PR0DV"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3iWWbtKc5gbgEfxL_MIK4UBZE4VXYzaPzgJhyDOPz8nM0rpwTUVGRK0PR0DV\"}"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7fd176e7-ad6e-4f3a-be3d-bc0d7059a144","keyName":"e2e-auth-iso-a-a77c9a","subscription":"e2e-auth-iso-cd9a8b","tenant":"e2e-shared-a-e356c0","userId":"7fd176e7-ad6e-4f3a-be3d-bc0d7059a144","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/auth-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-cd9a8b"}
{"level":"info","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:00:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b33543b6-8aaf-47fc-8143-d42b959f3492","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54ed5909386c927ff9f9334152c4910614d03f281bf04aa89398f658bd9f6227"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43e43b4fd715439f249992454eb844edc81bd9b6babe0b1434f5098381e55854"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/208e9ec457015e8f27eb939646cd3605a094ff8dadbfd97f23195807b59c57ec"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f79d0f6513ad3a381477ea9592850a3c3a40e3e867e718e3419d690f9969457c"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da6b63bb3fd9d6238d5879fa1a6e0a9676f826e167f5a79319e81ab6aa229193"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d953243b7c82043da7e0fadfd80a3caac6f478065cd07723c62ece002bcc76cb"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5558c7d61407a929478580f647afc596cbea1621bbab0b271ef5f6362541b68"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee59e2c46aaaee2ac1b131ecdd7572453ce55de12b7e3889ef0341c41d4fb030"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49b22789ecebe8f1cc603851b9a122f02213f1306851b1505c9e0dc5c8fee5c4"}
{"level":"info","ts":"2026-07-08T04:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab7cd0717745a451d2370871a8cd508ede00db9fc8564313886a3116b2b789c6"}
{"level":"info","ts":"2026-07-08T04:00:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff0df89997e3993d4fb865933530aa78a959fa3bd780d750e3635b42d08cf530"}
{"level":"info","ts":"2026-07-08T04:00:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10ffa2e04a646017f37ae9109b349d85b4c0a15e2d47d27a1dc3a601523d7a0f"}
{"level":"info","ts":"2026-07-08T04:00:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db99e1acb016be2776d2d709b6d42070cc8c3bbd406376fe6f16e7466590704"}
{"level":"info","ts":"2026-07-08T04:00:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c77b6527bdc314ba89f921670d9ea47721df4ef90feeefa82f0dbddde913d957"}
{"level":"info","ts":"2026-07-08T04:00:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dcaa0ea593d48398c7787200129d13c4b637459152ec482ed7ef7bb5a9c94ba"}
{"level":"info","ts":"2026-07-08T04:00:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7ed6556062100a033d4a7d78707bd8206cc1da2b287b1c783ac459dd28ebc34"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"info","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857"}
{"level":"debug","ts":"2026-07-08T04:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1"}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1"}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1"}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133"}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133"}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133"}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133"}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133"}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"}
{"level":"debug","ts":"2026-07-08T04:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d"}
{"level":"error","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b"}
{"level":"debug","ts":"2026-07-08T04:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b"}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9"}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133"}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:01:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"debug","ts":"2026-07-08T04:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:01:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:01:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857"}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b"}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d"}
{"level":"debug","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"}
{"level":"info","ts":"2026-07-08T04:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b"}
{"level":"info","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59216","PortSpecifier":{"PortValue":59216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb323990-d699-4103-96eb-b1ccf6853d40","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59216","PortSpecifier":{"PortValue":59216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483295,"nanos":373307921},"http":{"id":"eb323990-d699-4103-96eb-b1ccf6853d40","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/sub-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb323990-d699-4103-96eb-b1ccf6853d40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce38759d-74aa-48eb-bc63-d95234139765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38122","PortSpecifier":{"PortValue":38122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce38759d-74aa-48eb-bc63-d95234139765","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce38759d-74aa-48eb-bc63-d95234139765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38122","PortSpecifier":{"PortValue":38122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483295,"nanos":414518244},"http":{"id":"ce38759d-74aa-48eb-bc63-d95234139765","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce38759d-74aa-48eb-bc63-d95234139765","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce38759d-74aa-48eb-bc63-d95234139765","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce38759d-74aa-48eb-bc63-d95234139765","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce38759d-74aa-48eb-bc63-d95234139765","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce38759d-74aa-48eb-bc63-d95234139765","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce38759d-74aa-48eb-bc63-d95234139765","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/sub-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce38759d-74aa-48eb-bc63-d95234139765","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce38759d-74aa-48eb-bc63-d95234139765","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce38759d-74aa-48eb-bc63-d95234139765","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce38759d-74aa-48eb-bc63-d95234139765","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce38759d-74aa-48eb-bc63-d95234139765","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59226","PortSpecifier":{"PortValue":59226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"510b1232-b8af-9630-a2bf-4956874ca7a8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59226","PortSpecifier":{"PortValue":59226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483295,"nanos":452526361},"http":{"id":"510b1232-b8af-9630-a2bf-4956874ca7a8","method":"GET","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1duHte3uziwXUjYo2_b9UJLiHXUsUKqEDZSYdOqv6lkble3ugUucCt3R0CKrQ"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1duHte3uziwXUjYo2_b9UJLiHXUsUKqEDZSYdOqv6lkble3ugUucCt3R0CKrQ\"}"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7b3e15d-8bf2-4f4c-b8b6-de4d3f42e163","keyName":"e2e-sub-iso-d475c7","subscription":"e2e-a-only-380ff3","tenant":"e2e-shared-a-e356c0","userId":"f7b3e15d-8bf2-4f4c-b8b6-de4d3f42e163","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/sub-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-380ff3"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"510b1232-b8af-9630-a2bf-4956874ca7a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38136","PortSpecifier":{"PortValue":38136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38136","PortSpecifier":{"PortValue":38136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483295,"nanos":491231958},"http":{"id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","method":"GET","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vmVsISPS6fDjXWzt_aJ2B5R0NfFxv0oHuOJNEJL9DqVBmIwHsjYcu3yCTGNk"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vmVsISPS6fDjXWzt_aJ2B5R0NfFxv0oHuOJNEJL9DqVBmIwHsjYcu3yCTGNk\"}"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"111d15bf-7338-4b9f-8383-b0442ef7ce6d","keyName":"e2e-sub-iso-a9355d","subscription":"e2e-b-only-380ff3","tenant":"e2e-shared-b-b98412","userId":"111d15bf-7338-4b9f-8383-b0442ef7ce6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/sub-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-380ff3"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:01:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74d3e7f1-7a61-4fb1-9e94-462095d155c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"731c53c2-5942-4886-8ce3-68f052d14858","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34986","PortSpecifier":{"PortValue":34986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"731c53c2-5942-4886-8ce3-68f052d14858","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"731c53c2-5942-4886-8ce3-68f052d14858","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34986","PortSpecifier":{"PortValue":34986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483311,"nanos":765205028},"http":{"id":"731c53c2-5942-4886-8ce3-68f052d14858","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"731c53c2-5942-4886-8ce3-68f052d14858","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"731c53c2-5942-4886-8ce3-68f052d14858","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"731c53c2-5942-4886-8ce3-68f052d14858","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"731c53c2-5942-4886-8ce3-68f052d14858","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"731c53c2-5942-4886-8ce3-68f052d14858","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"731c53c2-5942-4886-8ce3-68f052d14858","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/sub-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"731c53c2-5942-4886-8ce3-68f052d14858","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"731c53c2-5942-4886-8ce3-68f052d14858","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"731c53c2-5942-4886-8ce3-68f052d14858","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"731c53c2-5942-4886-8ce3-68f052d14858","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"731c53c2-5942-4886-8ce3-68f052d14858","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52000","PortSpecifier":{"PortValue":52000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52000","PortSpecifier":{"PortValue":52000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483311,"nanos":799294367},"http":{"id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/sub-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0963b059-593a-4f0c-806a-2c12b53e3ac0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34988","PortSpecifier":{"PortValue":34988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:34988","PortSpecifier":{"PortValue":34988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483311,"nanos":831316692},"http":{"id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uKC0hjhDTGvdVoRk_cKpBX4CDJwJKXl6ozuQx8GUQwL02qwd4CZRJPVfKDHT"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uKC0hjhDTGvdVoRk_cKpBX4CDJwJKXl6ozuQx8GUQwL02qwd4CZRJPVfKDHT\"}"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce038877-8a83-4b96-9433-6a00b25069d5","keyName":"e2e-sub-iso-595eeb","subscription":"e2e-shared-sub-a37bff","tenant":"e2e-shared-a-e356c0","userId":"ce038877-8a83-4b96-9433-6a00b25069d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/sub-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a37bff"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"876c35c5-636e-488b-bbe9-e0da8ed5d133","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52006","PortSpecifier":{"PortValue":52006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52006","PortSpecifier":{"PortValue":52006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483311,"nanos":859268372},"http":{"id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R3X3lfrjqj3a6F8u_9sOB6LAkmjju2ZQ5BB6XZb9Y3YO1fOlzgYiWFikS84h"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R3X3lfrjqj3a6F8u_9sOB6LAkmjju2ZQ5BB6XZb9Y3YO1fOlzgYiWFikS84h\"}"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d5df5427-b93d-476d-ae6a-051bf989e40a","keyName":"e2e-sub-iso-bd7990","subscription":"e2e-shared-sub-a37bff","tenant":"e2e-shared-b-b98412","userId":"d5df5427-b93d-476d-ae6a-051bf989e40a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/sub-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a37bff"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6346c8f4-99fa-4d1e-a785-86155ad5d1ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63e8e08e1de3a61b4cb10aeb4a98ac57bb6d1c6085456c651e64182f57e28a0d"}
{"level":"info","ts":"2026-07-08T04:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d915a09e823e7f6b1ce3995557e71f262de1c722c2762f0e345ec72c0d88d6f1"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8fbec9ef5d33139843f1d35579def79fe31133ffc90567d98a0bdecd74b6575"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7efcad7c2dc4ac86912e20f9a1f8a072bd7fef336f98dd3e71509a5296ac2857"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d277376c44cb7af7b0839918403232ff4d2177fbfd4a7b9465b6f27f036f8c6b"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ece311be48fe2f460e39fc814b3332a6c87e55e84e0de52044df8a33fdfca4c9"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3373c7627dbeafed73c44f366662975e67f4778808182fbff0004ca9c9715bd3"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5d444332108fbb8840b8bf75fcd800a751e4b7af25a249f4fde9e6263c27f23"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f808d0f09632e255fc45306d256434db65b20ae1f097f741b1074801566c5133"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3153b71142df1dfdad9cb9f067244d6a628b54243deab1288fa301a586900451"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f0e5e3f8b6700d835fabd2e0bc693d84e8cf0d2fc644e1885cf5592c1f44973"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e39380b9c60c40cb708e5eb2fc2baac599945d1f045ff20881bd1013ce29da2"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396f4591e1b24f779d6037040ead5bc20106299f416aef15080708b532057c87"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79e9af799f835447b88671ef8b0a060cefb88a112b2e4acd0c6abca233a9e683"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60a164dcb57511f0b604f8b7adedea60b4c179cffe155faa4ec3c3cba5e41292"}
{"level":"info","ts":"2026-07-08T04:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fc5c7f05ae3c24ead4a6b9c57c802ff765a10d7c5521e6a3c2c7c52637db45b"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f"}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f"}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f"}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"error","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"error","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b"}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93"}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93"}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93"}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6"}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6"}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6"}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8"}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8"}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"}
{"level":"error","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T04:02:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b"}
{"level":"debug","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6"}
{"level":"info","ts":"2026-07-08T04:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"}
{"level":"info","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38588","PortSpecifier":{"PortValue":38588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38588","PortSpecifier":{"PortValue":38588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483380,"nanos":228272397},"http":{"id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45cc85e0-de85-45c1-a8cc-e5915c8a11c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53046","PortSpecifier":{"PortValue":53046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53046","PortSpecifier":{"PortValue":53046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483380,"nanos":269249678},"http":{"id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/rate-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"176b4255-314d-4fb8-9488-84b2cfd8bba1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38592","PortSpecifier":{"PortValue":38592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b90e3c5-0814-4839-b248-af1a18bddc98","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38592","PortSpecifier":{"PortValue":38592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483380,"nanos":305415943},"http":{"id":"4b90e3c5-0814-4839-b248-af1a18bddc98","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8uReJsGJpvSLLL3T_yWyxA5J41q2etdG4ljMheqFDCn77eGwbnRKRQHaKlcX"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8uReJsGJpvSLLL3T_yWyxA5J41q2etdG4ljMheqFDCn77eGwbnRKRQHaKlcX\"}"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83b1a7d0-f52f-412e-aa8d-8608b200904a","keyName":"e2e-rate-a-b6baf8","subscription":"e2e-rate-iso-a-b6baf8","tenant":"e2e-shared-a-e356c0","userId":"83b1a7d0-f52f-412e-aa8d-8608b200904a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-b6baf8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6baf8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6baf8"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"83b1a7d0-f52f-412e-aa8d-8608b200904a","keyName":"e2e-rate-a-b6baf8","selected_subscription":"e2e-rate-iso-a-b6baf8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-b6baf8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6baf8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b90e3c5-0814-4839-b248-af1a18bddc98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38602","PortSpecifier":{"PortValue":38602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38602","PortSpecifier":{"PortValue":38602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483381,"nanos":365773565},"http":{"id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8uReJsGJpvSLLL3T_yWyxA5J41q2etdG4ljMheqFDCn77eGwbnRKRQHaKlcX"}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8uReJsGJpvSLLL3T_yWyxA5J41q2etdG4ljMheqFDCn77eGwbnRKRQHaKlcX\"}"}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83b1a7d0-f52f-412e-aa8d-8608b200904a","keyName":"e2e-rate-a-b6baf8","subscription":"e2e-rate-iso-a-b6baf8","tenant":"e2e-shared-a-e356c0","userId":"83b1a7d0-f52f-412e-aa8d-8608b200904a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-b6baf8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6baf8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6baf8"}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"83b1a7d0-f52f-412e-aa8d-8608b200904a","keyName":"e2e-rate-a-b6baf8","selected_subscription":"e2e-rate-iso-a-b6baf8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-b6baf8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6baf8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adefcad5-26dc-43b2-b38b-2196ecba12a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38616","PortSpecifier":{"PortValue":38616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ed451c9-8959-45c0-9865-9739ecc18699","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38616","PortSpecifier":{"PortValue":38616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483382,"nanos":435543681},"http":{"id":"8ed451c9-8959-45c0-9865-9739ecc18699","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8uReJsGJpvSLLL3T_yWyxA5J41q2etdG4ljMheqFDCn77eGwbnRKRQHaKlcX"}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8uReJsGJpvSLLL3T_yWyxA5J41q2etdG4ljMheqFDCn77eGwbnRKRQHaKlcX\"}"}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83b1a7d0-f52f-412e-aa8d-8608b200904a","keyName":"e2e-rate-a-b6baf8","subscription":"e2e-rate-iso-a-b6baf8","tenant":"e2e-shared-a-e356c0","userId":"83b1a7d0-f52f-412e-aa8d-8608b200904a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-b6baf8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6baf8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b6baf8"}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"83b1a7d0-f52f-412e-aa8d-8608b200904a","keyName":"e2e-rate-a-b6baf8","selected_subscription":"e2e-rate-iso-a-b6baf8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-b6baf8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b6baf8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ed451c9-8959-45c0-9865-9739ecc18699","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33462","PortSpecifier":{"PortValue":33462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7072f47e-3806-4950-95aa-400f0712f2ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33462","PortSpecifier":{"PortValue":33462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483391,"nanos":13864297},"http":{"id":"7072f47e-3806-4950-95aa-400f0712f2ac","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7072f47e-3806-4950-95aa-400f0712f2ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57104","PortSpecifier":{"PortValue":57104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57104","PortSpecifier":{"PortValue":57104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483391,"nanos":50448843},"http":{"id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"]}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1fc21dd6531"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1c1d5ad1-cf1a-4b41-a1c4-2e432f4d7338"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3ad0e8a-5c89-438e-9bd1-1b40595085a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/rate-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db54eb54-b6d6-4757-80bb-cec8ff5ad257","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33476","PortSpecifier":{"PortValue":33476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33476","PortSpecifier":{"PortValue":33476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483391,"nanos":83917127},"http":{"id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa64f2f4-23b5-40b6-9519-c88b57e4d809","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33480","PortSpecifier":{"PortValue":33480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6150dc19-8596-478d-b0b2-95fe810b4103","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33480","PortSpecifier":{"PortValue":33480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483392,"nanos":119993582},"http":{"id":"6150dc19-8596-478d-b0b2-95fe810b4103","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6150dc19-8596-478d-b0b2-95fe810b4103","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"409f9523-c33f-4489-ab85-718bfdb60511","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33496","PortSpecifier":{"PortValue":33496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"409f9523-c33f-4489-ab85-718bfdb60511","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"409f9523-c33f-4489-ab85-718bfdb60511","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33496","PortSpecifier":{"PortValue":33496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483393,"nanos":157723858},"http":{"id":"409f9523-c33f-4489-ab85-718bfdb60511","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"409f9523-c33f-4489-ab85-718bfdb60511","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"409f9523-c33f-4489-ab85-718bfdb60511","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"409f9523-c33f-4489-ab85-718bfdb60511","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"409f9523-c33f-4489-ab85-718bfdb60511","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33500","PortSpecifier":{"PortValue":33500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33500","PortSpecifier":{"PortValue":33500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483394,"nanos":189504780},"http":{"id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ef79ad9-78e1-4ecc-8ad5-2b9632e202bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"978bf764-5742-4ab2-b56e-83aff8425017","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59778","PortSpecifier":{"PortValue":59778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"978bf764-5742-4ab2-b56e-83aff8425017","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"978bf764-5742-4ab2-b56e-83aff8425017","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59778","PortSpecifier":{"PortValue":59778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483395,"nanos":222396202},"http":{"id":"978bf764-5742-4ab2-b56e-83aff8425017","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"978bf764-5742-4ab2-b56e-83aff8425017","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978bf764-5742-4ab2-b56e-83aff8425017","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"978bf764-5742-4ab2-b56e-83aff8425017","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"978bf764-5742-4ab2-b56e-83aff8425017","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59794","PortSpecifier":{"PortValue":59794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"817fefc4-0e37-474f-8467-2f9863a29a21","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59794","PortSpecifier":{"PortValue":59794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483396,"nanos":255293605},"http":{"id":"817fefc4-0e37-474f-8467-2f9863a29a21","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817fefc4-0e37-474f-8467-2f9863a29a21","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59810","PortSpecifier":{"PortValue":59810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e57821c-ac17-49a0-919d-554e105b05f6","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59810","PortSpecifier":{"PortValue":59810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483397,"nanos":289844084},"http":{"id":"3e57821c-ac17-49a0-919d-554e105b05f6","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e57821c-ac17-49a0-919d-554e105b05f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59822","PortSpecifier":{"PortValue":59822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59822","PortSpecifier":{"PortValue":59822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483398,"nanos":324592689},"http":{"id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37370a10-e7dc-4171-99ba-858eab6ad8dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59834","PortSpecifier":{"PortValue":59834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b67e384-6b26-4e89-a913-32a79757d2d7","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59834","PortSpecifier":{"PortValue":59834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483399,"nanos":358071953},"http":{"id":"3b67e384-6b26-4e89-a913-32a79757d2d7","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b67e384-6b26-4e89-a913-32a79757d2d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59838","PortSpecifier":{"PortValue":59838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97a75019-90db-4912-8bfc-b6cb44eae14c","method":"POST","path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions","host":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59838","PortSpecifier":{"PortValue":59838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483400,"nanos":394642678},"http":{"id":"97a75019-90db-4912-8bfc-b6cb44eae14c","method":"POST","headers":{":authority":"e2e-shared-a-e356c0.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNIjWJ2Zf5CGeQ6b_32mhjHQ2fdicLCMZQrYDwtZVHm22hf59yzcHBxj9ZYk\"}"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","subscription":"e2e-rate-iso-a-e829e8","tenant":"e2e-shared-a-e356c0","userId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\",\"requestedSubscription\":\"e2e-rate-iso-a-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e356c0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265d826b-25d8-4d2a-9a81-ea47b5be7a51","keyName":"e2e-rate-a-e829e8","selected_subscription":"e2e-rate-iso-a-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-a-e356c0/e2e-rate-iso-a-e829e8@ai-tenant-e2e-shared-a-e356c0/rate-test-model-e356c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e356c0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e829e8","namespace":"ai-tenant-e2e-shared-a-e356c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a75019-90db-4912-8bfc-b6cb44eae14c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40200","PortSpecifier":{"PortValue":40200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","method":"POST","path":"/ai-tenant-e2e-shared-b-b98412/rate-test-model-b98412/v1/completions","host":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40200","PortSpecifier":{"PortValue":40200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783483400,"nanos":456336409},"http":{"id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","method":"POST","headers":{":authority":"e2e-shared-b-b98412.apps.c36f7209-bebf-4ca3-9350-b1fc21dd6531.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b98412/rate-test-model-b98412/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8IsE4OpIMqEZJsG1_sKr1td4IfRGr1wlpcM0z0uYRj8nAXX2zAmEDU0WtIJF"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8IsE4OpIMqEZJsG1_sKr1td4IfRGr1wlpcM0z0uYRj8nAXX2zAmEDU0WtIJF\"}"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0d87d39-c419-4ba7-8c10-da54800f1c8a","keyName":"e2e-rate-b-e829e8","subscription":"e2e-rate-iso-b-e829e8","tenant":"e2e-shared-b-b98412","userId":"b0d87d39-c419-4ba7-8c10-da54800f1c8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b98412/rate-test-model-b98412\",\"requestedSubscription\":\"e2e-rate-iso-b-e829e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b98412.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b98412","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e829e8","namespace":"ai-tenant-e2e-shared-b-b98412","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b98412/rate-test-model-b98412\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e829e8"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0d87d39-c419-4ba7-8c10-da54800f1c8a","keyName":"e2e-rate-b-e829e8","selected_subscription":"e2e-rate-iso-b-e829e8","selected_subscription_key":"ai-tenant-e2e-shared-b-b98412/e2e-rate-iso-b-e829e8@ai-tenant-e2e-shared-b-b98412/rate-test-model-b98412","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b98412","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e829e8","namespace":"ai-tenant-e2e-shared-b-b98412","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T04:03:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a1fa777-020c-4ebc-9f26-d096ea5d9624","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T04:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad6a9d14120459b30f9e15fe446be1c16fcae370d7a5f21d7b4197b4bd4c3b02"}
{"level":"info","ts":"2026-07-08T04:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ef11762f3d3d3ebacf47db97d1de1294438cd53386fbcb22de9512829bdcd8b"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d39678490abe84319e9d7443c3030425ca70ec244ee834c72ae492fcef3e217f"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f81154a11d8434fc4c489662a20e2fe51e9bb07a26089cfd51808de660e9fa9e"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef35bf3c71c8349f6265de7dc65e187e425cf4cfc6633a16a08064cfafe72e3c"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a3d77386d9b7093631680d75d823f8f6489820ce1706da4ebaa67a3d0d2102e"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ef004a5a213a1de0b19a215e7c388517ba2ade68d26de7114664082c6f54e72"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc5cd44b7c94bc85f70cb68b74e95f904d66bf54348dfdee23a8353bba6f2f75"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b4cae242d063bdc6e92a1859797e40d2e0ed6269091b3f88a8eabd116dd978d"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15affab103fd4d842743eb162b4964fdd98fb292aee0fa5897e29b0c347f5e93"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc7b80c3858059efc1053df1492a29c2872e44c73a5a059b2ebf51984f69a385"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d94ada482999a7c358d2537e2255ce17ec7b8bf88ac5b20254658f46508a8bf"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b327efe4d56e563e9666ffc151fe7eb96193ea0102b96a9f11cc3cd8e80561c"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8eb7a147d5b9f437ea29af820e588da4e93df23a45b5be12818270430058adc8"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efaff6ca65c56358efd0bce819c6aa46e45f08129f69374907ee4be92ce00fe6"}
{"level":"info","ts":"2026-07-08T04:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b3dffbbbea5402851e946877a06f1a603dbf14f4f995d8e48e4b6e5910acc3d"}
{"level":"info","ts":"2026-07-08T04:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d0d186c71d7ddcad7801b344d2f17d51dc54ea6be4102403f206bbe328c091b"}
{"level":"info","ts":"2026-07-08T04:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6680e3635681a336ae91c7a1047a63efcfd15ba7ff38924a33d316b2ce26b187"}
{"level":"info","ts":"2026-07-08T04:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01d9ca2dda58afeee19107a0bf39e1a2fb5942da47b60c4c784e0135d4382179"}
{"level":"info","ts":"2026-07-08T04:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/773e650e74f2396ab074e3fd096cd0fb2834097d90528061a9377c03efcdb99d"}