--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b19e837aae0c21dd90ed0c7ed04d0e2b37c9cff478395e1573ae834714"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b19e837aae0c21dd90ed0c7ed04d0e2b37c9cff478395e1573ae834714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f93c0b19e837aae0c21dd90ed0c7ed04d0e2b37c9cff478395e1573ae834714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b19e837aae0c21dd90ed0c7ed04d0e2b37c9cff478395e1573ae834714","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b19e837aae0c21dd90ed0c7ed04d0e2b37c9cff478395e1573ae834714"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f"}
{"level":"info","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f93c0b19e837aae0c21dd90ed0c7ed04d0e2b37c9cff478395e1573ae834714","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba"}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba"}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba"}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba"}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450"}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450"}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450"}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253"}
{"level":"error","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253"}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253"}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd"}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd"}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd"}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ea45724746e1b0ecf91bc07aa608bb62d8eedc28e07865a3e9b01118b673348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ea45724746e1b0ecf91bc07aa608bb62d8eedc28e07865a3e9b01118b673348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea45724746e1b0ecf91bc07aa608bb62d8eedc28e07865a3e9b01118b673348"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ea45724746e1b0ecf91bc07aa608bb62d8eedc28e07865a3e9b01118b673348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ea45724746e1b0ecf91bc07aa608bb62d8eedc28e07865a3e9b01118b673348"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ea45724746e1b0ecf91bc07aa608bb62d8eedc28e07865a3e9b01118b673348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ea45724746e1b0ecf91bc07aa608bb62d8eedc28e07865a3e9b01118b673348","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea45724746e1b0ecf91bc07aa608bb62d8eedc28e07865a3e9b01118b673348"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:25:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"}
{"level":"error","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51388","PortSpecifier":{"PortValue":51388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51388","PortSpecifier":{"PortValue":51388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344351,"nanos":496316986},"http":{"id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"541e2bbb-2b61-4cf4-a1b4-5e3d79471505","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45268","PortSpecifier":{"PortValue":45268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45268","PortSpecifier":{"PortValue":45268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344351,"nanos":557283897},"http":{"id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/auth-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f72ff03-7f22-42c8-accf-a679ffe51ef6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51404","PortSpecifier":{"PortValue":51404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","method":"GET","path":"/maas-api/v1/api-keys/946db212-8421-4915-bde3-98f867ac0fcd","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51404","PortSpecifier":{"PortValue":51404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344351,"nanos":655680227},"http":{"id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","method":"GET","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/946db212-8421-4915-bde3-98f867ac0fcd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/946db212-8421-4915-bde3-98f867ac0fcd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1330f6a9-e62c-4072-b4e2-afc965e1252f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45272","PortSpecifier":{"PortValue":45272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66dce213-f3e1-4635-ac66-84472d2a344e","method":"GET","path":"/maas-api/v1/api-keys/3f57e1d7-02d2-455f-930a-e190ebc09cfb","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45272","PortSpecifier":{"PortValue":45272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344351,"nanos":696139593},"http":{"id":"66dce213-f3e1-4635-ac66-84472d2a344e","method":"GET","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3f57e1d7-02d2-455f-930a-e190ebc09cfb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3f57e1d7-02d2-455f-930a-e190ebc09cfb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/auth-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66dce213-f3e1-4635-ac66-84472d2a344e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50426","PortSpecifier":{"PortValue":50426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50426","PortSpecifier":{"PortValue":50426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344367,"nanos":28305272},"http":{"id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e341f60-cc9e-4e8d-9ae5-9e53b2920d8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37474","PortSpecifier":{"PortValue":37474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37474","PortSpecifier":{"PortValue":37474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344367,"nanos":65857579},"http":{"id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/auth-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a504085-5e0f-4647-9a60-6a923b41fb9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50428","PortSpecifier":{"PortValue":50428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50428","PortSpecifier":{"PortValue":50428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344367,"nanos":109314408},"http":{"id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","method":"GET","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kjYZKQgtJnROHG0y_1BUnSP08SrZfeM7UPBa6SEo3PODWZYvEj0pg0LE33f7"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kjYZKQgtJnROHG0y_1BUnSP08SrZfeM7UPBa6SEo3PODWZYvEj0pg0LE33f7\"}"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18792934-94fe-42a5-a66c-7e0e367f5369","keyName":"e2e-auth-iso-a-12b000","subscription":"e2e-auth-iso-99e601","tenant":"e2e-shared-a-164b27","userId":"18792934-94fe-42a5-a66c-7e0e367f5369","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-99e601"}
{"level":"info","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b6c6558-7c47-4ae3-8b7c-98ea41534582","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53258","PortSpecifier":{"PortValue":53258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53258","PortSpecifier":{"PortValue":53258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344384,"nanos":330516914},"http":{"id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7d03cf1-b099-4b6a-a8a3-fc7191f107e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ead75655-3417-4f18-9457-36ef61252775","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34508","PortSpecifier":{"PortValue":34508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ead75655-3417-4f18-9457-36ef61252775","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ead75655-3417-4f18-9457-36ef61252775","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34508","PortSpecifier":{"PortValue":34508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344384,"nanos":369767154},"http":{"id":"ead75655-3417-4f18-9457-36ef61252775","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ead75655-3417-4f18-9457-36ef61252775","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ead75655-3417-4f18-9457-36ef61252775","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ead75655-3417-4f18-9457-36ef61252775","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead75655-3417-4f18-9457-36ef61252775","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead75655-3417-4f18-9457-36ef61252775","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ead75655-3417-4f18-9457-36ef61252775","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/auth-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ead75655-3417-4f18-9457-36ef61252775","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ead75655-3417-4f18-9457-36ef61252775","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ead75655-3417-4f18-9457-36ef61252775","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ead75655-3417-4f18-9457-36ef61252775","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ead75655-3417-4f18-9457-36ef61252775","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70b08f39-6159-4221-90cf-2f618331d1da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34524","PortSpecifier":{"PortValue":34524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70b08f39-6159-4221-90cf-2f618331d1da","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70b08f39-6159-4221-90cf-2f618331d1da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34524","PortSpecifier":{"PortValue":34524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344384,"nanos":408250851},"http":{"id":"70b08f39-6159-4221-90cf-2f618331d1da","method":"GET","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70b08f39-6159-4221-90cf-2f618331d1da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UPPVb29KNeoSiK4X_m5Te6gZfDyD4sGlYMONzSzvAoK7DeCpyjnVNsUKIZFo"}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70b08f39-6159-4221-90cf-2f618331d1da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UPPVb29KNeoSiK4X_m5Te6gZfDyD4sGlYMONzSzvAoK7DeCpyjnVNsUKIZFo\"}"}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70b08f39-6159-4221-90cf-2f618331d1da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70b08f39-6159-4221-90cf-2f618331d1da","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70b08f39-6159-4221-90cf-2f618331d1da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"70b08f39-6159-4221-90cf-2f618331d1da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70b08f39-6159-4221-90cf-2f618331d1da","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T13:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70b08f39-6159-4221-90cf-2f618331d1da","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e976e153-93e4-4e94-9318-7df545a68af3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40922","PortSpecifier":{"PortValue":40922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e976e153-93e4-4e94-9318-7df545a68af3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e976e153-93e4-4e94-9318-7df545a68af3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40922","PortSpecifier":{"PortValue":40922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344401,"nanos":783150221},"http":{"id":"e976e153-93e4-4e94-9318-7df545a68af3","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e976e153-93e4-4e94-9318-7df545a68af3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e976e153-93e4-4e94-9318-7df545a68af3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e976e153-93e4-4e94-9318-7df545a68af3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e976e153-93e4-4e94-9318-7df545a68af3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e976e153-93e4-4e94-9318-7df545a68af3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e976e153-93e4-4e94-9318-7df545a68af3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e976e153-93e4-4e94-9318-7df545a68af3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e976e153-93e4-4e94-9318-7df545a68af3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e976e153-93e4-4e94-9318-7df545a68af3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e976e153-93e4-4e94-9318-7df545a68af3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e976e153-93e4-4e94-9318-7df545a68af3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39186","PortSpecifier":{"PortValue":39186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ab08178-ed26-425f-ad41-172e5d35c65e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39186","PortSpecifier":{"PortValue":39186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344401,"nanos":820366381},"http":{"id":"0ab08178-ed26-425f-ad41-172e5d35c65e","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/auth-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ab08178-ed26-425f-ad41-172e5d35c65e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40928","PortSpecifier":{"PortValue":40928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40928","PortSpecifier":{"PortValue":40928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344401,"nanos":862602127},"http":{"id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4256b38e-6baf-4c86-90d6-1a86627c66bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96817172-c07f-4b39-a6d8-795faa89d105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39188","PortSpecifier":{"PortValue":39188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96817172-c07f-4b39-a6d8-795faa89d105","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96817172-c07f-4b39-a6d8-795faa89d105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39188","PortSpecifier":{"PortValue":39188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344401,"nanos":896444883},"http":{"id":"96817172-c07f-4b39-a6d8-795faa89d105","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96817172-c07f-4b39-a6d8-795faa89d105","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96817172-c07f-4b39-a6d8-795faa89d105","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96817172-c07f-4b39-a6d8-795faa89d105","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96817172-c07f-4b39-a6d8-795faa89d105","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96817172-c07f-4b39-a6d8-795faa89d105","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96817172-c07f-4b39-a6d8-795faa89d105","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/auth-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96817172-c07f-4b39-a6d8-795faa89d105","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96817172-c07f-4b39-a6d8-795faa89d105","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96817172-c07f-4b39-a6d8-795faa89d105","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96817172-c07f-4b39-a6d8-795faa89d105","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96817172-c07f-4b39-a6d8-795faa89d105","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49004","PortSpecifier":{"PortValue":49004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a809295-d8ec-46eb-95cb-c569aa720f41","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49004","PortSpecifier":{"PortValue":49004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344417,"nanos":3250688},"http":{"id":"0a809295-d8ec-46eb-95cb-c569aa720f41","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a809295-d8ec-46eb-95cb-c569aa720f41","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43606","PortSpecifier":{"PortValue":43606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43606","PortSpecifier":{"PortValue":43606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344417,"nanos":40290800},"http":{"id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/auth-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8be16dca-ae4d-4c6f-a9d4-623d7f3999da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43622","PortSpecifier":{"PortValue":43622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","method":"GET","path":"/maas-api/v1/api-keys/b13f8830-6563-4b18-96ee-b54cf6275a55","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43622","PortSpecifier":{"PortValue":43622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344417,"nanos":78578898},"http":{"id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","method":"GET","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b13f8830-6563-4b18-96ee-b54cf6275a55",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b13f8830-6563-4b18-96ee-b54cf6275a55",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/auth-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320f9396-5bbe-41fd-9fbe-bf47edba704c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49006","PortSpecifier":{"PortValue":49006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77b06b27-a426-4305-a2d1-a428224f2ca8","method":"GET","path":"/maas-api/v1/api-keys/b13f8830-6563-4b18-96ee-b54cf6275a55","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49006","PortSpecifier":{"PortValue":49006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344417,"nanos":114090941},"http":{"id":"77b06b27-a426-4305-a2d1-a428224f2ca8","method":"GET","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b13f8830-6563-4b18-96ee-b54cf6275a55",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b13f8830-6563-4b18-96ee-b54cf6275a55",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:26:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77b06b27-a426-4305-a2d1-a428224f2ca8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48128","PortSpecifier":{"PortValue":48128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48128","PortSpecifier":{"PortValue":48128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344436,"nanos":304114449},"http":{"id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a61ae135-7dbf-43fe-9f56-83327b6308ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a00527e3-3357-44f6-8165-602ef96421ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55376","PortSpecifier":{"PortValue":55376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a00527e3-3357-44f6-8165-602ef96421ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a00527e3-3357-44f6-8165-602ef96421ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55376","PortSpecifier":{"PortValue":55376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344436,"nanos":345260364},"http":{"id":"a00527e3-3357-44f6-8165-602ef96421ce","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a00527e3-3357-44f6-8165-602ef96421ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a00527e3-3357-44f6-8165-602ef96421ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a00527e3-3357-44f6-8165-602ef96421ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a00527e3-3357-44f6-8165-602ef96421ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a00527e3-3357-44f6-8165-602ef96421ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a00527e3-3357-44f6-8165-602ef96421ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/auth-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a00527e3-3357-44f6-8165-602ef96421ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a00527e3-3357-44f6-8165-602ef96421ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a00527e3-3357-44f6-8165-602ef96421ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a00527e3-3357-44f6-8165-602ef96421ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a00527e3-3357-44f6-8165-602ef96421ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48140","PortSpecifier":{"PortValue":48140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7caca2b-6d1c-4f58-8246-f5e664400684","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48140","PortSpecifier":{"PortValue":48140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344436,"nanos":385043237},"http":{"id":"b7caca2b-6d1c-4f58-8246-f5e664400684","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OeC83eyt0SzygkJG_u1VSH9vZaY6KK7reRjf82vVJen7QAh8dN1VOyxOC6gI"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OeC83eyt0SzygkJG_u1VSH9vZaY6KK7reRjf82vVJen7QAh8dN1VOyxOC6gI\"}"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f22073a2-7baf-40d7-93d8-777710b20a12","keyName":"e2e-auth-iso-a-535b39","subscription":"e2e-auth-iso-dbb3b8","tenant":"e2e-shared-a-164b27","userId":"f22073a2-7baf-40d7-93d8-777710b20a12","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/auth-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-dbb3b8"}
{"level":"info","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:27:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7caca2b-6d1c-4f58-8246-f5e664400684","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b493e44b4862b618ad90553100b369951f21623d9d4dda14708e488868ddba"}
{"level":"info","ts":"2026-07-06T13:27:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f93c0b19e837aae0c21dd90ed0c7ed04d0e2b37c9cff478395e1573ae834714"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a775f48961d46a51319905eb966a36bf5c5dbe3276b97418e34afe101a3eebd"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a45ce0b620e891cb06a022d66b789d26c02090895f0ac7273aab8ff517f9e845"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3436c3ee5827fc6e9d42f3c4b51fd22dda4f0b0120f30f87ea25ca2c5c2be098"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b22ae3f247ad772291b6aeac184c8eea65f31f02421341203cac10ca02beca3b"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da073e04900e4032c5b75e63176561dd46e1791bd02c089ae49f81a32532b4fb"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cccceb5ccf69ce320795ff0be12b5cd2206c73095d114565d8216c4021493253"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c639a34d4bc764866ee86d7d3132d7ee7b585997a393c647fd9d544004e6397c"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ea45724746e1b0ecf91bc07aa608bb62d8eedc28e07865a3e9b01118b673348"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f417b235b3afe4d4c8f678dc8fe4c409d9ccd80eb19a2ceac2e8a3146e1d26dc"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/814d125bfb099ab2e5d84ab1551ce7454905853e399343715759e5847018c733"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c4e01762a529e6169cdaaef2efcad00552d6fd4d43bf5863f269d7a3fc4b500"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fb76942b4c1afbfddb08564916c634922d6ff5f2986e7a0fda187a1824da398"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f021f8f0787ae93360a71adb0715624cb3abbd1363e71743d97c50a88ff7f4ee"}
{"level":"info","ts":"2026-07-06T13:27:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed46f2f6d3c6f5232c4e8a61a1f2ffff6943472ca5d8283d9175d729eeba5450"}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb527f1d263441b406e8953566d087159a7151e48d65e942f394d3689674ef04"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb527f1d263441b406e8953566d087159a7151e48d65e942f394d3689674ef04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb527f1d263441b406e8953566d087159a7151e48d65e942f394d3689674ef04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb527f1d263441b406e8953566d087159a7151e48d65e942f394d3689674ef04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb527f1d263441b406e8953566d087159a7151e48d65e942f394d3689674ef04"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb527f1d263441b406e8953566d087159a7151e48d65e942f394d3689674ef04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a"}
{"level":"debug","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"info","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"info","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"debug","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"debug","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"error","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:27:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb527f1d263441b406e8953566d087159a7151e48d65e942f394d3689674ef04"}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb527f1d263441b406e8953566d087159a7151e48d65e942f394d3689674ef04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"debug","ts":"2026-07-06T13:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee"}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a"}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae626181-4b39-420b-be7e-f485ee359bff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56118","PortSpecifier":{"PortValue":56118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae626181-4b39-420b-be7e-f485ee359bff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae626181-4b39-420b-be7e-f485ee359bff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56118","PortSpecifier":{"PortValue":56118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344493,"nanos":410886607},"http":{"id":"ae626181-4b39-420b-be7e-f485ee359bff","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae626181-4b39-420b-be7e-f485ee359bff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae626181-4b39-420b-be7e-f485ee359bff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae626181-4b39-420b-be7e-f485ee359bff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae626181-4b39-420b-be7e-f485ee359bff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae626181-4b39-420b-be7e-f485ee359bff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae626181-4b39-420b-be7e-f485ee359bff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/sub-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae626181-4b39-420b-be7e-f485ee359bff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae626181-4b39-420b-be7e-f485ee359bff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae626181-4b39-420b-be7e-f485ee359bff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae626181-4b39-420b-be7e-f485ee359bff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae626181-4b39-420b-be7e-f485ee359bff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47648","PortSpecifier":{"PortValue":47648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47648","PortSpecifier":{"PortValue":47648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344493,"nanos":453505911},"http":{"id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/sub-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b8c9d7-6cbc-411b-bb91-b345f38a8bfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56120","PortSpecifier":{"PortValue":56120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56120","PortSpecifier":{"PortValue":56120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344493,"nanos":498460864},"http":{"id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","method":"GET","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fMPqfTNmjdIfxkhz_hWlkXA9k3cvrUzOwrIBtyVXQ798DdFs6QpDYM9PMKu7"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fMPqfTNmjdIfxkhz_hWlkXA9k3cvrUzOwrIBtyVXQ798DdFs6QpDYM9PMKu7\"}"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6633579e-5443-49a8-8a82-18a3a914d92c","keyName":"e2e-sub-iso-5960f9","subscription":"e2e-a-only-0960e7","tenant":"e2e-shared-a-164b27","userId":"6633579e-5443-49a8-8a82-18a3a914d92c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/sub-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0960e7"}
{"level":"info","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b4794c8-60df-47ae-bc16-5e445e9aec5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47660","PortSpecifier":{"PortValue":47660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94424d95-e28e-48fb-95fb-60d196fcd492","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47660","PortSpecifier":{"PortValue":47660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344493,"nanos":529906510},"http":{"id":"94424d95-e28e-48fb-95fb-60d196fcd492","method":"GET","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9fRZ4texL2aHutyX_w9Bpq9gCFWN7DFWglLxllekdhg9YFqpjm99ZQGVQtJ0"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9fRZ4texL2aHutyX_w9Bpq9gCFWN7DFWglLxllekdhg9YFqpjm99ZQGVQtJ0\"}"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87a34d98-dad8-41ea-b21b-acc95e73816d","keyName":"e2e-sub-iso-312e89","subscription":"e2e-b-only-0960e7","tenant":"e2e-shared-b-03b528","userId":"87a34d98-dad8-41ea-b21b-acc95e73816d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/sub-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0960e7"}
{"level":"info","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:28:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94424d95-e28e-48fb-95fb-60d196fcd492","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56130","PortSpecifier":{"PortValue":56130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56130","PortSpecifier":{"PortValue":56130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344501,"nanos":805812704},"http":{"id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/sub-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"981a2c5b-76f7-455a-a08b-e7c1a32638b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47676","PortSpecifier":{"PortValue":47676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47676","PortSpecifier":{"PortValue":47676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344501,"nanos":843198404},"http":{"id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/sub-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd961983-3f92-4fcc-9217-0e5cc48b0862","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56134","PortSpecifier":{"PortValue":56134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56134","PortSpecifier":{"PortValue":56134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344501,"nanos":881612738},"http":{"id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SACJRBUe441lHEvz_2IH4vnXC13CGbSN0SEEFeJNUZhrTUnwght3cUBs0agB"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SACJRBUe441lHEvz_2IH4vnXC13CGbSN0SEEFeJNUZhrTUnwght3cUBs0agB\"}"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cac17a75-5282-4016-b1dd-33f9ac3f0472","keyName":"e2e-sub-iso-9098d7","subscription":"e2e-shared-sub-16f286","tenant":"e2e-shared-a-164b27","userId":"cac17a75-5282-4016-b1dd-33f9ac3f0472","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/sub-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-16f286"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"954f3788-1e0e-4cdd-b3ae-9a7a025641c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47684","PortSpecifier":{"PortValue":47684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20fe1ad5-6318-443f-a560-bd89f454405d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47684","PortSpecifier":{"PortValue":47684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344501,"nanos":913040149},"http":{"id":"20fe1ad5-6318-443f-a560-bd89f454405d","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sr1QiA3GidBZIEP6_ewD2psZpp3HaPXigJb8ZqsyVfJwHhFVLV6ZigQSehNF"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sr1QiA3GidBZIEP6_ewD2psZpp3HaPXigJb8ZqsyVfJwHhFVLV6ZigQSehNF\"}"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d8f0b58-6c2a-4f28-9008-09a5ff7d9058","keyName":"e2e-sub-iso-8f9039","subscription":"e2e-shared-sub-16f286","tenant":"e2e-shared-b-03b528","userId":"7d8f0b58-6c2a-4f28-9008-09a5ff7d9058","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/sub-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-16f286"}
{"level":"info","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20fe1ad5-6318-443f-a560-bd89f454405d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c38475581fdd9bd4a0c30815ac15bc0e7b981fab009e207cae4b2a7e7bfbcdc3"}
{"level":"info","ts":"2026-07-06T13:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/877b9c62e395f9a7d200aced7b0862ef537f5301fe7e4babafa16f1d8c77f629"}
{"level":"info","ts":"2026-07-06T13:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abe317115c5824027627bce3da0a9fc9609e89d2c050e7ef7f92e55fc284489a"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2e2a5621dffc11d84cb0fe9e44a9997e3a75900954bda1cb40aed5f2be33e9d"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d71f7dee7d647919ba5a84ec18139b2b31e62159800dc099ec497fcedcc1e985"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2277d3490a7b6ab73543e2439520396b02e21943aef1508e36a06bf7163bf4b5"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37c03bbca48dc1beff7b6c9cb2b5f1fa1cdf76a7c9e20e56446cd844a4932cef"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c9bd07ac42ebbd53accf75ea5831c5ffb310198d94d5ba397646bd22f24fb1"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2fe76093ba323ce55e129782c4543d9ef34cf337bf3319d902ff7e54e2ab609"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09d2024da82d076d49c865c38c868875969e1bc4fc0fc803501d7b3ed83fccb6"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34d865aa686aace125b1ef778a1afeaf5051e70e297bcaf31ee6e73c432181f4"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7cf15d4b749e2eb74ace862733b1a36795cb70817dc0e834e98b07fb508876a"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb527f1d263441b406e8953566d087159a7151e48d65e942f394d3689674ef04"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/962b0d18ebd862746dd8016db67c6e89b400661e386d66e6fc782696fd9665ee"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/897ee397c00de6b97fb4cfe5e263d3a743c9f791ccdd7e770d9e63a01a114723"}
{"level":"info","ts":"2026-07-06T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c6022d0fdd372f174adef070967179030fc200d663daa4738d0e632bb8ff557"}
{"level":"debug","ts":"2026-07-06T13:28:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11"}
{"level":"info","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4"}
{"level":"info","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171"}
{"level":"info","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11"}
{"level":"info","ts":"2026-07-06T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4"}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e"}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e"}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"info","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8"}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:28:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171"}
{"level":"debug","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f"}
{"level":"debug","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"}
{"level":"debug","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8"}
{"level":"debug","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae"}
{"level":"debug","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354"}
{"level":"debug","ts":"2026-07-06T13:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"debug","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0"}
{"level":"info","ts":"2026-07-06T13:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0"}
{"level":"info","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57882","PortSpecifier":{"PortValue":57882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57882","PortSpecifier":{"PortValue":57882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344555,"nanos":830613232},"http":{"id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae25e1b1-3141-4ed0-bd9a-49332d2864cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55974","PortSpecifier":{"PortValue":55974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55974","PortSpecifier":{"PortValue":55974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344555,"nanos":873833497},"http":{"id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/rate-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44e4d09c-c75e-4d4d-8f9c-c2ee2de522bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57894","PortSpecifier":{"PortValue":57894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","method":"POST","path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57894","PortSpecifier":{"PortValue":57894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344555,"nanos":912501757},"http":{"id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16fXRtakuGOuOg5Uo_Te4sFxP66esZvPXus0urszjgoXftlAvmQpHytPyjHjN"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16fXRtakuGOuOg5Uo_Te4sFxP66esZvPXus0urszjgoXftlAvmQpHytPyjHjN\"}"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98c6c9c9-2ed8-4db0-9e3c-aab078d4b279","keyName":"e2e-rate-a-9d2b96","subscription":"e2e-rate-iso-a-9d2b96","tenant":"e2e-shared-a-164b27","userId":"98c6c9c9-2ed8-4db0-9e3c-aab078d4b279","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\",\"requestedSubscription\":\"e2e-rate-iso-a-9d2b96\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d2b96","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9d2b96"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98c6c9c9-2ed8-4db0-9e3c-aab078d4b279","keyName":"e2e-rate-a-9d2b96","selected_subscription":"e2e-rate-iso-a-9d2b96","selected_subscription_key":"ai-tenant-e2e-shared-a-164b27/e2e-rate-iso-a-9d2b96@ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d2b96","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f86de4e9-a17c-41c1-9449-d50a9f8e72d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57904","PortSpecifier":{"PortValue":57904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","method":"POST","path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57904","PortSpecifier":{"PortValue":57904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344556,"nanos":965209608},"http":{"id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16fXRtakuGOuOg5Uo_Te4sFxP66esZvPXus0urszjgoXftlAvmQpHytPyjHjN"}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16fXRtakuGOuOg5Uo_Te4sFxP66esZvPXus0urszjgoXftlAvmQpHytPyjHjN\"}"}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98c6c9c9-2ed8-4db0-9e3c-aab078d4b279","keyName":"e2e-rate-a-9d2b96","subscription":"e2e-rate-iso-a-9d2b96","tenant":"e2e-shared-a-164b27","userId":"98c6c9c9-2ed8-4db0-9e3c-aab078d4b279","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\",\"requestedSubscription\":\"e2e-rate-iso-a-9d2b96\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d2b96","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9d2b96"}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98c6c9c9-2ed8-4db0-9e3c-aab078d4b279","keyName":"e2e-rate-a-9d2b96","selected_subscription":"e2e-rate-iso-a-9d2b96","selected_subscription_key":"ai-tenant-e2e-shared-a-164b27/e2e-rate-iso-a-9d2b96@ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d2b96","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87524695-0799-4cf1-9c88-b7e1c3e3e3e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57912","PortSpecifier":{"PortValue":57912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9745b522-4771-4e1e-a0dd-b9318097aec2","method":"POST","path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57912","PortSpecifier":{"PortValue":57912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344558,"nanos":2213452},"http":{"id":"9745b522-4771-4e1e-a0dd-b9318097aec2","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16fXRtakuGOuOg5Uo_Te4sFxP66esZvPXus0urszjgoXftlAvmQpHytPyjHjN"}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16fXRtakuGOuOg5Uo_Te4sFxP66esZvPXus0urszjgoXftlAvmQpHytPyjHjN\"}"}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98c6c9c9-2ed8-4db0-9e3c-aab078d4b279","keyName":"e2e-rate-a-9d2b96","subscription":"e2e-rate-iso-a-9d2b96","tenant":"e2e-shared-a-164b27","userId":"98c6c9c9-2ed8-4db0-9e3c-aab078d4b279","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\",\"requestedSubscription\":\"e2e-rate-iso-a-9d2b96\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d2b96","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9d2b96"}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98c6c9c9-2ed8-4db0-9e3c-aab078d4b279","keyName":"e2e-rate-a-9d2b96","selected_subscription":"e2e-rate-iso-a-9d2b96","selected_subscription_key":"ai-tenant-e2e-shared-a-164b27/e2e-rate-iso-a-9d2b96@ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9d2b96","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9745b522-4771-4e1e-a0dd-b9318097aec2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39866","PortSpecifier":{"PortValue":39866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39866","PortSpecifier":{"PortValue":39866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344566,"nanos":880211395},"http":{"id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f971e447-c8d8-4805-8f2d-eb54589bf75f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51500","PortSpecifier":{"PortValue":51500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51500","PortSpecifier":{"PortValue":51500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344566,"nanos":922737798},"http":{"id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"]}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ae32bd65e59d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac5302cb-af68-4822-afa7-62b1716f4699"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1e00fd7e-6f89-4a8b-a92f-3cf551cccbf2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/rate-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be8385bf-1f2d-4878-bdc0-decb4d6236fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39872","PortSpecifier":{"PortValue":39872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","method":"POST","path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39872","PortSpecifier":{"PortValue":39872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344566,"nanos":960661767},"http":{"id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm\"}"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","subscription":"e2e-rate-iso-a-f20178","tenant":"e2e-shared-a-164b27","userId":"00c891c0-5783-4b04-b3cd-f7ddae533439","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\",\"requestedSubscription\":\"e2e-rate-iso-a-f20178\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f20178"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","selected_subscription":"e2e-rate-iso-a-f20178","selected_subscription_key":"ai-tenant-e2e-shared-a-164b27/e2e-rate-iso-a-f20178@ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de78f8a-aef0-4e9a-8b65-30ff35b2f3ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39874","PortSpecifier":{"PortValue":39874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","method":"POST","path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39874","PortSpecifier":{"PortValue":39874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344568,"nanos":1298527},"http":{"id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm"}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm\"}"}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","subscription":"e2e-rate-iso-a-f20178","tenant":"e2e-shared-a-164b27","userId":"00c891c0-5783-4b04-b3cd-f7ddae533439","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\",\"requestedSubscription\":\"e2e-rate-iso-a-f20178\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f20178"}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","selected_subscription":"e2e-rate-iso-a-f20178","selected_subscription_key":"ai-tenant-e2e-shared-a-164b27/e2e-rate-iso-a-f20178@ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d0ee8aa-7608-4364-a523-a756b4bfeb95","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"337311a8-1449-488e-bde8-61d62d5a144c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39890","PortSpecifier":{"PortValue":39890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"337311a8-1449-488e-bde8-61d62d5a144c","method":"POST","path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"337311a8-1449-488e-bde8-61d62d5a144c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39890","PortSpecifier":{"PortValue":39890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344569,"nanos":40858284},"http":{"id":"337311a8-1449-488e-bde8-61d62d5a144c","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm"}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm\"}"}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","subscription":"e2e-rate-iso-a-f20178","tenant":"e2e-shared-a-164b27","userId":"00c891c0-5783-4b04-b3cd-f7ddae533439","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\",\"requestedSubscription\":\"e2e-rate-iso-a-f20178\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"337311a8-1449-488e-bde8-61d62d5a144c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f20178"}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"337311a8-1449-488e-bde8-61d62d5a144c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","selected_subscription":"e2e-rate-iso-a-f20178","selected_subscription_key":"ai-tenant-e2e-shared-a-164b27/e2e-rate-iso-a-f20178@ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"337311a8-1449-488e-bde8-61d62d5a144c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"337311a8-1449-488e-bde8-61d62d5a144c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39892","PortSpecifier":{"PortValue":39892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","method":"POST","path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39892","PortSpecifier":{"PortValue":39892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344570,"nanos":79576880},"http":{"id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm"}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm\"}"}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","subscription":"e2e-rate-iso-a-f20178","tenant":"e2e-shared-a-164b27","userId":"00c891c0-5783-4b04-b3cd-f7ddae533439","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\",\"requestedSubscription\":\"e2e-rate-iso-a-f20178\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f20178"}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","selected_subscription":"e2e-rate-iso-a-f20178","selected_subscription_key":"ai-tenant-e2e-shared-a-164b27/e2e-rate-iso-a-f20178@ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"916d2b16-bf12-405b-84a3-f6e6b8173b71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39896","PortSpecifier":{"PortValue":39896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","method":"POST","path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39896","PortSpecifier":{"PortValue":39896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344571,"nanos":115105656},"http":{"id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm"}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm\"}"}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","subscription":"e2e-rate-iso-a-f20178","tenant":"e2e-shared-a-164b27","userId":"00c891c0-5783-4b04-b3cd-f7ddae533439","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\",\"requestedSubscription\":\"e2e-rate-iso-a-f20178\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f20178"}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","selected_subscription":"e2e-rate-iso-a-f20178","selected_subscription_key":"ai-tenant-e2e-shared-a-164b27/e2e-rate-iso-a-f20178@ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3adcb13c-dbc6-4f00-867a-f2be5e1ff8b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39902","PortSpecifier":{"PortValue":39902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","method":"POST","path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions","host":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39902","PortSpecifier":{"PortValue":39902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344572,"nanos":155788902},"http":{"id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","method":"POST","headers":{":authority":"e2e-shared-a-164b27.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xxGzyJe030NXswsm_fQnTi1PM0P2OIFEmDXznlN5dn7QAPO4CXj9GEYqfxKm\"}"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","subscription":"e2e-rate-iso-a-f20178","tenant":"e2e-shared-a-164b27","userId":"00c891c0-5783-4b04-b3cd-f7ddae533439","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\",\"requestedSubscription\":\"e2e-rate-iso-a-f20178\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-164b27.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f20178"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"00c891c0-5783-4b04-b3cd-f7ddae533439","keyName":"e2e-rate-a-f20178","selected_subscription":"e2e-rate-iso-a-f20178","selected_subscription_key":"ai-tenant-e2e-shared-a-164b27/e2e-rate-iso-a-f20178@ai-tenant-e2e-shared-a-164b27/rate-test-model-164b27","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-164b27","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f20178","namespace":"ai-tenant-e2e-shared-a-164b27","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc8bae0d-904f-4ca0-847d-448a7880bc02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51512","PortSpecifier":{"PortValue":51512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","method":"POST","path":"/ai-tenant-e2e-shared-b-03b528/rate-test-model-03b528/v1/completions","host":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51512","PortSpecifier":{"PortValue":51512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783344572,"nanos":197360407},"http":{"id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","method":"POST","headers":{":authority":"e2e-shared-b-03b528.apps.5dd637da-7c60-45ed-bccd-ae32bd65e59d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-03b528/rate-test-model-03b528/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-26UD2s8nXolx8tUV_XtMUdMUapPRMtX2K4oWiCmz3MK09Wn2k4g0Gbe1DopS"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-26UD2s8nXolx8tUV_XtMUdMUapPRMtX2K4oWiCmz3MK09Wn2k4g0Gbe1DopS\"}"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d5319080-9431-4a9b-a6f6-5f41d7ba2449","keyName":"e2e-rate-b-f20178","subscription":"e2e-rate-iso-b-f20178","tenant":"e2e-shared-b-03b528","userId":"d5319080-9431-4a9b-a6f6-5f41d7ba2449","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-03b528/rate-test-model-03b528\",\"requestedSubscription\":\"e2e-rate-iso-b-f20178\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-03b528.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-03b528","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f20178","namespace":"ai-tenant-e2e-shared-b-03b528","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-03b528/rate-test-model-03b528\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f20178"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d5319080-9431-4a9b-a6f6-5f41d7ba2449","keyName":"e2e-rate-b-f20178","selected_subscription":"e2e-rate-iso-b-f20178","selected_subscription_key":"ai-tenant-e2e-shared-b-03b528/e2e-rate-iso-b-f20178@ai-tenant-e2e-shared-b-03b528/rate-test-model-03b528","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-03b528","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f20178","namespace":"ai-tenant-e2e-shared-b-03b528","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:29:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68e9dc4d-8b4b-46c9-b531-6d9ba6b63003","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:29:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25b9aab9d8be6657805da5072cd53b7437ec883e99acef06c389b1d41c4494d0"}
{"level":"info","ts":"2026-07-06T13:29:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74fdef09e602bdd2c4fbbdbe487a17e2aca468f48c5f215e019ac734276582ae"}
{"level":"info","ts":"2026-07-06T13:29:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de08d549b9c9bd521a2c09d6e98f8d801bdcab0a3e99ac84bf7ac76793f736b4"}
{"level":"info","ts":"2026-07-06T13:29:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c69a16fc0cf7b961a4d4b0ff83add39980bcb4668006a1acafe5db4f5688a933"}
{"level":"info","ts":"2026-07-06T13:29:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0e116a49f60e175df297fc626a7cd405a37ccdd916fefd413bc617ee433cda8"}
{"level":"info","ts":"2026-07-06T13:29:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3daa1d0d8c78d752d8a68849624e49a5c436e3586c6a60940e43146637c2219"}
{"level":"info","ts":"2026-07-06T13:29:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8833bc28f9905cd9a445da076c70546816741b599941bf337e94b988891d759c"}
{"level":"info","ts":"2026-07-06T13:29:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e72a0c6316768347f6a97f35cf96e666b5752ace69c58c74d8e3c67ceaf8b11"}
{"level":"info","ts":"2026-07-06T13:29:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3f6036d257d3b2e03b15e5c2713730b0a6186f36388c195209c1fdb5a4dc4f0"}
{"level":"info","ts":"2026-07-06T13:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c948bb2ccee1213b1cb10a4eaeedc18ed3d4f9c965900fe3952e6151754a21e"}
{"level":"info","ts":"2026-07-06T13:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d2e678444e42ee05ace33c37d50f886cc6024762bdb5b6e70d89cb666371357"}
{"level":"info","ts":"2026-07-06T13:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c73fcc66649f6c9cd94642fe4b9c877b1b8fe1fa7d424d079a903d3d5bbf4171"}
{"level":"info","ts":"2026-07-06T13:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f01ce492599284dfa63ad1cdcc5a67e12e7549548173c7adc6e16479aee05f0"}
{"level":"info","ts":"2026-07-06T13:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2c82ee28917abb73912b7db6e5c00eb7fad2714ae74680585e6ea245da36354"}
{"level":"info","ts":"2026-07-06T13:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07440e1a32dd00388e1c656f79de8e4baa0453a3e15689d599b0aa03e4904970"}
{"level":"info","ts":"2026-07-06T13:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/158fdc950f9091348ae134e511dc34c7b520e5476466123e7222c2af98f0aac0"}
{"level":"info","ts":"2026-07-06T13:29:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f2385fafaab17d1b07b683f02c3910ae58e599c97e6f79c482e394e078a3e4f"}
{"level":"info","ts":"2026-07-06T13:29:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a27270fb4bb4c83d73a3838f22fc354f1ef8e6d4ae75fbd97b1156366d07aef0"}
{"level":"info","ts":"2026-07-06T13:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/139cd8a8cd4b69a9117fb6702644650881d7a41873472d5a33e1f3a9095761b8"}
{"level":"info","ts":"2026-07-06T13:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cc4667832f440bc666fdbca84a9500bdb20059492b1240241a89d4f59f38258"}