--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"error","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:11:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce"}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3"}
{"level":"info","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3"}
{"level":"info","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce"}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3"}
{"level":"info","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:52958","PortSpecifier":{"PortValue":52958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-12615b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:52958","PortSpecifier":{"PortValue":52958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113072,"nanos":343100792},"http":{"id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","method":"POST","headers":{":authority":"e2e-inf-a-12615b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7e3dc59dd9bf643a0e62a03b079b731c2c5b4db29843f78f9a5bb3bb7f8bb76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-12615b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-12615b/test-model-12615b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:11:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d9c8cc3-a5cd-483e-a012-ef78128eb5c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","method":"POST","path":"/ai-tenant-e2e-inf-a-12615b/test-model-12615b/v1/chat/completions","host":"e2e-inf-a-12615b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113076,"nanos":416818350},"http":{"id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","method":"POST","headers":{":authority":"e2e-inf-a-12615b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-12615b/test-model-12615b/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RI8LIjVpFeECccPe_oobEud0bUrwm9KlTfrj99ueKvHzWwonywPGcMcmrIXP"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-12615b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RI8LIjVpFeECccPe_oobEud0bUrwm9KlTfrj99ueKvHzWwonywPGcMcmrIXP\"}"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-12615b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"27dcddee-ce1d-4220-a960-9c87ed3b52a1","keyName":"e2e-tenant-inference-12615b","subscription":"test-model-12615b-sub","tenant":"e2e-inf-a-12615b","userId":"27dcddee-ce1d-4220-a960-9c87ed3b52a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-12615b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-12615b/test-model-12615b\",\"requestedSubscription\":\"test-model-12615b-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-12615b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-12615b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-12615b-sub","namespace":"ai-tenant-e2e-inf-a-12615b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-12615b/test-model-12615b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-12615b-sub"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"27dcddee-ce1d-4220-a960-9c87ed3b52a1","keyName":"e2e-tenant-inference-12615b","selected_subscription":"test-model-12615b-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-12615b/test-model-12615b-sub@ai-tenant-e2e-inf-a-12615b/test-model-12615b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-12615b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-12615b-sub","namespace":"ai-tenant-e2e-inf-a-12615b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4617d077-a897-47d8-b0e7-9fcd6495fc22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57894","PortSpecifier":{"PortValue":57894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-12615b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57894","PortSpecifier":{"PortValue":57894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113076,"nanos":717875643},"http":{"id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","method":"POST","headers":{":authority":"e2e-inf-a-12615b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7e3dc59dd9bf643a0e62a03b079b731c2c5b4db29843f78f9a5bb3bb7f8bb76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-12615b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-12615b/test-model-12615b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d9f5da5-bc6d-4e7b-b97e-4ae4f25ec90f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:42832","PortSpecifier":{"PortValue":42832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"972e0cb5-7705-4cad-ad43-68feec3d8980","method":"POST","path":"/ai-tenant-e2e-inf-b-33b41b/test-model-33b41b/v1/chat/completions","host":"e2e-inf-b-33b41b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:42832","PortSpecifier":{"PortValue":42832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113076,"nanos":758499760},"http":{"id":"972e0cb5-7705-4cad-ad43-68feec3d8980","method":"POST","headers":{":authority":"e2e-inf-b-33b41b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-33b41b/test-model-33b41b/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1P4Mfc8COPfBW83xS_6zx0Gm2nq7e85cfo4RCukAmHSBKCaik7b0v07bmVCrR"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-33b41b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1P4Mfc8COPfBW83xS_6zx0Gm2nq7e85cfo4RCukAmHSBKCaik7b0v07bmVCrR\"}"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-33b41b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-33b41b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ad5d74093870dddf0346e2743b0b487206d3a5f95521d94d2a705735f192f1cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-33b41b.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-33b41b/test-model-33b41b/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-03T21:11:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"972e0cb5-7705-4cad-ad43-68feec3d8980","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b6d09d5be593ab87c4ed29934ffb86611948aeb6c5095ed9d168d75e67e63dc"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8323521e7041956b18b099bc614cdff7cd74a224ab9d8b7683fd385d9144637a"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad5d74093870dddf0346e2743b0b487206d3a5f95521d94d2a705735f192f1cf"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d527cf26e53614ada1e7ca287bb19d4cbd49e2a7cb9e99611083c226b46dfd0"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c54229b978cf2f87a2050f55478084673462ef460f8c476db868f4a4827cc7d"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3bc22e6e5a5849907e78e6c6261975e046a1baaac0eb4b4bdfa039384fb6bf5"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48589d28e26d4f326373d65031c5292e49116340080dc942f92eb496be0508c6"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04b0f272ea8ebedc0219fc868fc5a2f3293ec984037763b11c9ac1a4a6d393de"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9bc718a4fbed58f9c0fd5f3b699c4afc51709a86117dc2551cd9a14ba77796b"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05f0c6dd459d931be5406c913de443ee0d93d41eb143323d0414a346803c515b"}
{"level":"info","ts":"2026-07-03T21:11:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bc7e5e4da384e7d09e458f02c81d4ff840478682563a818dd7f984e32de8f38"}
{"level":"info","ts":"2026-07-03T21:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4851461ccc3f83ef7c509afdb2ebf77ee956d31168f99d41656245d89d15eba"}
{"level":"info","ts":"2026-07-03T21:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de855c848d36ababedc64e9aa9f7b9b3067a45cbc0878c11e106422f0ae7884"}
{"level":"info","ts":"2026-07-03T21:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a2f815f11b504f7f6c60b71c88af4747af6d686cd8c6ee38bfe5776290ed7ce"}
{"level":"info","ts":"2026-07-03T21:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dc7b80df00d2ca9663dc5529925125fd8209bffaa1c7a353ca5bb5c948ead2e"}
{"level":"info","ts":"2026-07-03T21:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac085dc3509407e960848e18e5458080fa5b7a391b4fbfe6413565e03df1a834"}
{"level":"info","ts":"2026-07-03T21:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7e3dc59dd9bf643a0e62a03b079b731c2c5b4db29843f78f9a5bb3bb7f8bb76"}
{"level":"info","ts":"2026-07-03T21:11:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13baa385bd7e123cac27a6acaa07065a2fe0cbf1c056b8232595088996ac22b5"}
{"level":"info","ts":"2026-07-03T21:11:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28244be22c1cb6a59b670099583bfa8186136e47e2d5cb3e70573e5f6971b32d"}
{"level":"info","ts":"2026-07-03T21:11:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01f11205c4af79eb96bc503ac8c0d985f53260e72ae8c4d4d3f840c6265049a3"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0"}
{"level":"debug","ts":"2026-07-03T21:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0"}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56"}
{"level":"error","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56"}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56"}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56"}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56"}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"}
{"level":"debug","ts":"2026-07-03T21:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:12:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:12:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:12:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:12:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:12:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:12:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"}
{"level":"info","ts":"2026-07-03T21:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa26803bd85dcb820ea1b81217b153c44b7f13d3253c2ec9b15c4d1769f58eb0"}
{"level":"info","ts":"2026-07-03T21:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49743d961a4a5c9e1041e4daf1a67dd667350c2956653bf7bb8529f26f32193b"}
{"level":"info","ts":"2026-07-03T21:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82bd9568f1e05675eb9fd9cad2d0fcfdb33d06f10fb4337a3737d8a4bb4d3b56"}
{"level":"info","ts":"2026-07-03T21:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e67c9f9f385eb2fca03f2ea733e139c8cd649e2be051967f10da1a663222126e"}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b29bbe0ac6d811fd0de907c97595626d1e7ae5b0532c89ef9668f9c9afb6895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b29bbe0ac6d811fd0de907c97595626d1e7ae5b0532c89ef9668f9c9afb6895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b29bbe0ac6d811fd0de907c97595626d1e7ae5b0532c89ef9668f9c9afb6895"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b29bbe0ac6d811fd0de907c97595626d1e7ae5b0532c89ef9668f9c9afb6895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b29bbe0ac6d811fd0de907c97595626d1e7ae5b0532c89ef9668f9c9afb6895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b29bbe0ac6d811fd0de907c97595626d1e7ae5b0532c89ef9668f9c9afb6895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b29bbe0ac6d811fd0de907c97595626d1e7ae5b0532c89ef9668f9c9afb6895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b29bbe0ac6d811fd0de907c97595626d1e7ae5b0532c89ef9668f9c9afb6895"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"info","ts":"2026-07-03T21:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033619f49483750350bfc0f8c598230ebb59b6ed308f0716df68b2208390e706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033619f49483750350bfc0f8c598230ebb59b6ed308f0716df68b2208390e706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033619f49483750350bfc0f8c598230ebb59b6ed308f0716df68b2208390e706"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033619f49483750350bfc0f8c598230ebb59b6ed308f0716df68b2208390e706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["033619f49483750350bfc0f8c598230ebb59b6ed308f0716df68b2208390e706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033619f49483750350bfc0f8c598230ebb59b6ed308f0716df68b2208390e706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"033619f49483750350bfc0f8c598230ebb59b6ed308f0716df68b2208390e706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47"}
{"level":"info","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:13:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:13:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:13:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:13:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033619f49483750350bfc0f8c598230ebb59b6ed308f0716df68b2208390e706"}
{"level":"info","ts":"2026-07-03T21:13:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"}
{"level":"info","ts":"2026-07-03T21:13:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47"}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01"}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01"}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01"}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"}
{"level":"error","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01"}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"}
{"level":"error","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778"}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778"}
{"level":"info","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778"}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a0a87f1327cb88f28b32135359ea6ace5ac251640481fa429777852871468f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a0a87f1327cb88f28b32135359ea6ace5ac251640481fa429777852871468f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a0a87f1327cb88f28b32135359ea6ace5ac251640481fa429777852871468f"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9a0a87f1327cb88f28b32135359ea6ace5ac251640481fa429777852871468f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9a0a87f1327cb88f28b32135359ea6ace5ac251640481fa429777852871468f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9a0a87f1327cb88f28b32135359ea6ace5ac251640481fa429777852871468f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9a0a87f1327cb88f28b32135359ea6ace5ac251640481fa429777852871468f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:14:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9a0a87f1327cb88f28b32135359ea6ace5ac251640481fa429777852871468f"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355"}
{"level":"info","ts":"2026-07-03T21:14:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680"}
{"level":"info","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44208","PortSpecifier":{"PortValue":44208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20e1dc3b-15c9-4210-b460-a9188806211b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44208","PortSpecifier":{"PortValue":44208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113247,"nanos":605629519},"http":{"id":"20e1dc3b-15c9-4210-b460-a9188806211b","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20e1dc3b-15c9-4210-b460-a9188806211b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:38854","PortSpecifier":{"PortValue":38854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:38854","PortSpecifier":{"PortValue":38854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113247,"nanos":681219578},"http":{"id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/auth-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a9b3d4a-1057-4301-9aa2-cb6b95cdc260","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22b24fc7-a196-48e2-99e7-53e10535ed32","method":"GET","path":"/maas-api/v1/api-keys/b5a74302-5819-4d39-9e7c-feec6ad7e4b6","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113247,"nanos":772176527},"http":{"id":"22b24fc7-a196-48e2-99e7-53e10535ed32","method":"GET","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b5a74302-5819-4d39-9e7c-feec6ad7e4b6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b5a74302-5819-4d39-9e7c-feec6ad7e4b6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22b24fc7-a196-48e2-99e7-53e10535ed32","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:38856","PortSpecifier":{"PortValue":38856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","method":"GET","path":"/maas-api/v1/api-keys/25d4be4b-56e0-4d5b-9699-01ad99ce43f7","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:38856","PortSpecifier":{"PortValue":38856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113247,"nanos":807061208},"http":{"id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","method":"GET","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/25d4be4b-56e0-4d5b-9699-01ad99ce43f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/25d4be4b-56e0-4d5b-9699-01ad99ce43f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/auth-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6eb475b1-6e9d-4c8f-8d01-16bcb6a86a48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:39606","PortSpecifier":{"PortValue":39606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:39606","PortSpecifier":{"PortValue":39606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113264,"nanos":851097270},"http":{"id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"170107c3-53b2-4c0f-8c88-fba406e8c9f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:42630","PortSpecifier":{"PortValue":42630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:42630","PortSpecifier":{"PortValue":42630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113264,"nanos":887523952},"http":{"id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/auth-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae0e9346-66c0-45e8-b9fb-ea1d9bce6452","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73d23859-645e-4230-b1bd-fefd83527231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:39614","PortSpecifier":{"PortValue":39614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73d23859-645e-4230-b1bd-fefd83527231","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73d23859-645e-4230-b1bd-fefd83527231","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:39614","PortSpecifier":{"PortValue":39614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113264,"nanos":931023040},"http":{"id":"73d23859-645e-4230-b1bd-fefd83527231","method":"GET","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1B4lXxCGABBdskccN_TfGomOCH1k3MqOTL2SANjT7AcLTbSgEqFthBXwsGuqq"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1B4lXxCGABBdskccN_TfGomOCH1k3MqOTL2SANjT7AcLTbSgEqFthBXwsGuqq\"}"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c95b8210-479f-4457-867f-5f84e34cd6d7","keyName":"e2e-auth-iso-a-0db927","subscription":"e2e-auth-iso-36efd6","tenant":"e2e-shared-a-1a4753","userId":"c95b8210-479f-4457-867f-5f84e34cd6d7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73d23859-645e-4230-b1bd-fefd83527231","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73d23859-645e-4230-b1bd-fefd83527231","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-36efd6"}
{"level":"info","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73d23859-645e-4230-b1bd-fefd83527231","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73d23859-645e-4230-b1bd-fefd83527231","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30496f3e-3dea-4acb-8616-10896d7be752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44436","PortSpecifier":{"PortValue":44436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30496f3e-3dea-4acb-8616-10896d7be752","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30496f3e-3dea-4acb-8616-10896d7be752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44436","PortSpecifier":{"PortValue":44436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113279,"nanos":883118164},"http":{"id":"30496f3e-3dea-4acb-8616-10896d7be752","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30496f3e-3dea-4acb-8616-10896d7be752","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30496f3e-3dea-4acb-8616-10896d7be752","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30496f3e-3dea-4acb-8616-10896d7be752","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30496f3e-3dea-4acb-8616-10896d7be752","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30496f3e-3dea-4acb-8616-10896d7be752","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30496f3e-3dea-4acb-8616-10896d7be752","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30496f3e-3dea-4acb-8616-10896d7be752","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30496f3e-3dea-4acb-8616-10896d7be752","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30496f3e-3dea-4acb-8616-10896d7be752","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30496f3e-3dea-4acb-8616-10896d7be752","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30496f3e-3dea-4acb-8616-10896d7be752","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:48118","PortSpecifier":{"PortValue":48118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30da876f-7a0b-4144-98e6-0cb243e19c64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:48118","PortSpecifier":{"PortValue":48118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113279,"nanos":918338759},"http":{"id":"30da876f-7a0b-4144-98e6-0cb243e19c64","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/auth-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30da876f-7a0b-4144-98e6-0cb243e19c64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:48122","PortSpecifier":{"PortValue":48122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de11f605-2be5-4445-bcbc-0d4a215d5652","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:48122","PortSpecifier":{"PortValue":48122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113279,"nanos":954486350},"http":{"id":"de11f605-2be5-4445-bcbc-0d4a215d5652","method":"GET","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1F3ZLxEH2RCh8MFsN_9egwnUFedvS5lMkdgySwYZ7Upo1F31znxEpQINMugDE"}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1F3ZLxEH2RCh8MFsN_9egwnUFedvS5lMkdgySwYZ7Upo1F31znxEpQINMugDE\"}"}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-03T21:14:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de11f605-2be5-4445-bcbc-0d4a215d5652","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:39034","PortSpecifier":{"PortValue":39034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec0c2fa0-7579-4a72-984a-47a54929b905","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:39034","PortSpecifier":{"PortValue":39034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113297,"nanos":19321714},"http":{"id":"ec0c2fa0-7579-4a72-984a-47a54929b905","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec0c2fa0-7579-4a72-984a-47a54929b905","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9047aa1b-df87-4bab-8600-cc196345338b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:47096","PortSpecifier":{"PortValue":47096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9047aa1b-df87-4bab-8600-cc196345338b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9047aa1b-df87-4bab-8600-cc196345338b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:47096","PortSpecifier":{"PortValue":47096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113297,"nanos":56486661},"http":{"id":"9047aa1b-df87-4bab-8600-cc196345338b","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9047aa1b-df87-4bab-8600-cc196345338b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9047aa1b-df87-4bab-8600-cc196345338b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9047aa1b-df87-4bab-8600-cc196345338b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9047aa1b-df87-4bab-8600-cc196345338b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9047aa1b-df87-4bab-8600-cc196345338b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9047aa1b-df87-4bab-8600-cc196345338b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/auth-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9047aa1b-df87-4bab-8600-cc196345338b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9047aa1b-df87-4bab-8600-cc196345338b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9047aa1b-df87-4bab-8600-cc196345338b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9047aa1b-df87-4bab-8600-cc196345338b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9047aa1b-df87-4bab-8600-cc196345338b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:39044","PortSpecifier":{"PortValue":39044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:39044","PortSpecifier":{"PortValue":39044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113297,"nanos":110615011},"http":{"id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"027ce594-3353-49c7-ba44-c3d8fa422d2a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:47104","PortSpecifier":{"PortValue":47104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:47104","PortSpecifier":{"PortValue":47104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113297,"nanos":149147475},"http":{"id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/auth-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:14:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55be1cba-5cc4-4262-88f0-9d902ed4ee75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:50874","PortSpecifier":{"PortValue":50874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:50874","PortSpecifier":{"PortValue":50874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113312,"nanos":103949620},"http":{"id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e0ada62-7729-4a3b-a6e4-a9a477cff594","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"737e2861-eef0-437e-a932-6865198d0baf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44206","PortSpecifier":{"PortValue":44206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"737e2861-eef0-437e-a932-6865198d0baf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"737e2861-eef0-437e-a932-6865198d0baf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44206","PortSpecifier":{"PortValue":44206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113312,"nanos":136111055},"http":{"id":"737e2861-eef0-437e-a932-6865198d0baf","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"737e2861-eef0-437e-a932-6865198d0baf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"737e2861-eef0-437e-a932-6865198d0baf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"737e2861-eef0-437e-a932-6865198d0baf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"737e2861-eef0-437e-a932-6865198d0baf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"737e2861-eef0-437e-a932-6865198d0baf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"737e2861-eef0-437e-a932-6865198d0baf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/auth-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"737e2861-eef0-437e-a932-6865198d0baf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"737e2861-eef0-437e-a932-6865198d0baf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"737e2861-eef0-437e-a932-6865198d0baf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"737e2861-eef0-437e-a932-6865198d0baf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"737e2861-eef0-437e-a932-6865198d0baf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","method":"GET","path":"/maas-api/v1/api-keys/e6a8e9ce-5ecc-4b05-94e5-7d8aab9eed51","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113312,"nanos":175253348},"http":{"id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","method":"GET","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e6a8e9ce-5ecc-4b05-94e5-7d8aab9eed51",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e6a8e9ce-5ecc-4b05-94e5-7d8aab9eed51",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/auth-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a330f01-2659-4ace-8b1b-f3c291feaa78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:50880","PortSpecifier":{"PortValue":50880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","method":"GET","path":"/maas-api/v1/api-keys/e6a8e9ce-5ecc-4b05-94e5-7d8aab9eed51","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:50880","PortSpecifier":{"PortValue":50880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113312,"nanos":207627820},"http":{"id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","method":"GET","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e6a8e9ce-5ecc-4b05-94e5-7d8aab9eed51",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e6a8e9ce-5ecc-4b05-94e5-7d8aab9eed51",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:15:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43cc2085-7020-47fd-b1d2-e6f1af393b08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44704","PortSpecifier":{"PortValue":44704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44704","PortSpecifier":{"PortValue":44704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113327,"nanos":133902334},"http":{"id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"563a2a1f-3add-4cd5-a7e7-97b616e21a08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57926","PortSpecifier":{"PortValue":57926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:57926","PortSpecifier":{"PortValue":57926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113327,"nanos":189882477},"http":{"id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/auth-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43fb7572-d27d-4824-9cf0-c7a5baaaf2a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"186ca199-c40a-4590-800b-9974f0f81a80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44706","PortSpecifier":{"PortValue":44706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"186ca199-c40a-4590-800b-9974f0f81a80","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"186ca199-c40a-4590-800b-9974f0f81a80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:44706","PortSpecifier":{"PortValue":44706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113327,"nanos":229816886},"http":{"id":"186ca199-c40a-4590-800b-9974f0f81a80","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t5ABKmVljRw72ERf_YjxoTYrV241NLK6oqlg8jE2ZE4Qab4wzRFSmRyH7OMG"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t5ABKmVljRw72ERf_YjxoTYrV241NLK6oqlg8jE2ZE4Qab4wzRFSmRyH7OMG\"}"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04763dba-fc1d-4a99-8b9e-6afa38b39be9","keyName":"e2e-auth-iso-a-d6d979","subscription":"e2e-auth-iso-30525d","tenant":"e2e-shared-a-1a4753","userId":"04763dba-fc1d-4a99-8b9e-6afa38b39be9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"186ca199-c40a-4590-800b-9974f0f81a80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/auth-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"186ca199-c40a-4590-800b-9974f0f81a80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-30525d"}
{"level":"info","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"186ca199-c40a-4590-800b-9974f0f81a80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:15:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"186ca199-c40a-4590-800b-9974f0f81a80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9"}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2"}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2"}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d"}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f64434337c01d4e049377c66ecfa7cb09ae427c9dbf7cba21468cee99a9e0378"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9a0a87f1327cb88f28b32135359ea6ace5ac251640481fa429777852871468f"}
{"level":"info","ts":"2026-07-03T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38ca93250b13fd868a572663d99d3a95acce2009a8321f7e46b29b85778c7a47"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5abea4513cfc4c57f7fa90aa1e3a6c3a399feec8dc9933dc444ee38ec898680"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b16ee0d01eac206adc89a6ce0c55286964236a5405d176ed2fd929a256e45d01"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b027cbf74ce492d5a1a50fec20efa40250a66695195b7b6f21e1fe36f4b2f40f"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6b30ef0da7b64a686390d48accbe93652e493fb737ee9bb4f2df88bf2c5602b"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1d72d9cd57f1844e8dc2da93a6628786dd6972e6f93bae6dd2daa085691778"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f1b53b1d6a98aebaaafee69447b1c4ef63c236a59c9cdd020b1bfe0207e0836"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/698131c79aaab5bce1f7e58c3c549772ec6116df645d235268bf559c18dbf355"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b29bbe0ac6d811fd0de907c97595626d1e7ae5b0532c89ef9668f9c9afb6895"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4f8a5ea302188303c210679587f854fd8b60fbac08eeeddb87d2fbb24d6802a"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eda4b4cc0db05908232b1c07620763b6ee00e7b3ffcaf1ddfb6956d915c4f382"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c33c1338a2323d099683f012fbd78514fba091d92f256f1f587cf8d62d74dd43"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e5feffbf9281c8ee60088d016daac2afccb741bfcbfdb40bf4f24ebe9cdb89b"}
{"level":"info","ts":"2026-07-03T21:15:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/033619f49483750350bfc0f8c598230ebb59b6ed308f0716df68b2208390e706"}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"}
{"level":"info","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26"}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008"}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008"}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008"}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"debug","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:16:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"}
{"level":"debug","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"}
{"level":"info","ts":"2026-07-03T21:16:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008"}
{"level":"info","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51346","PortSpecifier":{"PortValue":51346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51346","PortSpecifier":{"PortValue":51346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113403,"nanos":131371414},"http":{"id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/sub-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00f7101-b685-4e15-93c0-e9f940c6eee9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113403,"nanos":179437321},"http":{"id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/sub-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac62af3f-a92f-4cb1-a8f4-352226cc8f31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51356","PortSpecifier":{"PortValue":51356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51356","PortSpecifier":{"PortValue":51356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113403,"nanos":218876756},"http":{"id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","method":"GET","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-91UBlwxoWZyZQcuJ_dYbeBnCUA7xH3ftIZOp3YGjOskDS70oX6lVSNcNo8NL"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-91UBlwxoWZyZQcuJ_dYbeBnCUA7xH3ftIZOp3YGjOskDS70oX6lVSNcNo8NL\"}"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd9af714-ad2d-411a-ad3f-e0b77921ed05","keyName":"e2e-sub-iso-bf9528","subscription":"e2e-a-only-2ae32d","tenant":"e2e-shared-a-1a4753","userId":"fd9af714-ad2d-411a-ad3f-e0b77921ed05","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/sub-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-2ae32d"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a57658d-72a3-40d6-badc-e72fe5a4fb9a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"143297ff-b739-9693-819b-ed29d056bded","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:47934","PortSpecifier":{"PortValue":47934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"143297ff-b739-9693-819b-ed29d056bded","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"143297ff-b739-9693-819b-ed29d056bded","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:47934","PortSpecifier":{"PortValue":47934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113403,"nanos":261773038},"http":{"id":"143297ff-b739-9693-819b-ed29d056bded","method":"GET","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"143297ff-b739-9693-819b-ed29d056bded","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-K17Dwt9ESBS9hDVM_9qvk9H0OYW0F7aDTy3cKszXbWtZiXkuPY3QMhGjIrE3"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"143297ff-b739-9693-819b-ed29d056bded","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-K17Dwt9ESBS9hDVM_9qvk9H0OYW0F7aDTy3cKszXbWtZiXkuPY3QMhGjIrE3\"}"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"143297ff-b739-9693-819b-ed29d056bded","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"58c5349d-682b-4fcf-9f36-f486b6a19e14","keyName":"e2e-sub-iso-c195d2","subscription":"e2e-b-only-2ae32d","tenant":"e2e-shared-b-26641f","userId":"58c5349d-682b-4fcf-9f36-f486b6a19e14","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"143297ff-b739-9693-819b-ed29d056bded","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"143297ff-b739-9693-819b-ed29d056bded","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"143297ff-b739-9693-819b-ed29d056bded","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"143297ff-b739-9693-819b-ed29d056bded","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/sub-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"143297ff-b739-9693-819b-ed29d056bded","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"143297ff-b739-9693-819b-ed29d056bded","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"143297ff-b739-9693-819b-ed29d056bded","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-2ae32d"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"143297ff-b739-9693-819b-ed29d056bded","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"143297ff-b739-9693-819b-ed29d056bded","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"143297ff-b739-9693-819b-ed29d056bded","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49710","PortSpecifier":{"PortValue":49710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf2083fc-f50d-4db9-868d-5380862fcc07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49710","PortSpecifier":{"PortValue":49710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113419,"nanos":536944269},"http":{"id":"bf2083fc-f50d-4db9-868d-5380862fcc07","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/sub-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf2083fc-f50d-4db9-868d-5380862fcc07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:40114","PortSpecifier":{"PortValue":40114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:40114","PortSpecifier":{"PortValue":40114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113419,"nanos":572506746},"http":{"id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/sub-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55b8261a-1d09-43e4-b8a2-8838eb8f4678","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49726","PortSpecifier":{"PortValue":49726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49726","PortSpecifier":{"PortValue":49726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113419,"nanos":606183285},"http":{"id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5o6Z4wlaC15QvxvT_s20FTDZY90QGxtLnYqeUDWImet6CLPXxZhhpxzJtlMf"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5o6Z4wlaC15QvxvT_s20FTDZY90QGxtLnYqeUDWImet6CLPXxZhhpxzJtlMf\"}"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d6d48542-e557-4dd6-9013-92ab1fcea87f","keyName":"e2e-sub-iso-eb028a","subscription":"e2e-shared-sub-509675","tenant":"e2e-shared-a-1a4753","userId":"d6d48542-e557-4dd6-9013-92ab1fcea87f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/sub-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-509675"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f2d3b0d-7333-409b-8661-7b1c0f357daf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:40122","PortSpecifier":{"PortValue":40122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:40122","PortSpecifier":{"PortValue":40122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113419,"nanos":635318910},"http":{"id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BylnyMa0DIwncAGZ_W67ENbemKGr8FDG4e4c5CdlYiROxQodh7dfSKtGPjCN"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BylnyMa0DIwncAGZ_W67ENbemKGr8FDG4e4c5CdlYiROxQodh7dfSKtGPjCN\"}"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a807118e-d9e8-4695-b40e-d9c0bf444842","keyName":"e2e-sub-iso-092fad","subscription":"e2e-shared-sub-509675","tenant":"e2e-shared-b-26641f","userId":"a807118e-d9e8-4695-b40e-d9c0bf444842","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/sub-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-509675"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9147e2f7-d042-4e88-b2e1-d4e289a341a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/661a502bdfaeb16334e8e4fbd622af72795f3b4eb26d9c1eb0033defaad20fb5"}
{"level":"info","ts":"2026-07-03T21:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83bf81975b5bf4a1dac9b677500561cc80e8acf5ee61d45b9489b76830adc074"}
{"level":"info","ts":"2026-07-03T21:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1fde9e609aae6f83bca32303088a94a67586c3a531ed2b52a6368c44fb5ef6b"}
{"level":"info","ts":"2026-07-03T21:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2083de22e28f3755581c0f5e0ddb4120ad5066bcf8071d482c2b659c94d38fa"}
{"level":"info","ts":"2026-07-03T21:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/329e62884dfea215ff8731b1e8977982f1b6e192a874e88b9923c5f50d32519e"}
{"level":"info","ts":"2026-07-03T21:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e5db5fa5ea5c06b3e782ba63aba2a25c01af66730da94c91798041234b9baf2"}
{"level":"info","ts":"2026-07-03T21:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a97c3023a37dec7e9d5afae5f09186c84de18b3c4f593f514947fa930e496008"}
{"level":"info","ts":"2026-07-03T21:17:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7fa315c9746a1cc5726d666be610ef5d767cfbb7ea83bfb6abcc646b7290d43"}
{"level":"info","ts":"2026-07-03T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f726bfd5423289bfee9250feda77655c267796a08c884bd151f002a8f295c26"}
{"level":"info","ts":"2026-07-03T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/147729206ab03e6ab679d9609fa69aebc0151227b7fb19823ba3f41e96d3375b"}
{"level":"info","ts":"2026-07-03T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80d6cd2f5ae149c12dd7d184138d0092004e0ce14b8eeb741132d57635b5b141"}
{"level":"info","ts":"2026-07-03T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df28b2e8060e38317bc636b09f06c21b184d5ba43e3ab219cbb37ff1cd45c8ca"}
{"level":"info","ts":"2026-07-03T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bf84d134b249b3932d576e3e5f7db533341f585edd4495141a3ea30094c82d9"}
{"level":"info","ts":"2026-07-03T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d67df86593358f9b0c67931239f99dbaf9f64c9350f3160b997ae36ed86d919d"}
{"level":"info","ts":"2026-07-03T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30327403897b965af327458830902dd35dd3dc9d7a10f2e1d09e9b68c61391a9"}
{"level":"info","ts":"2026-07-03T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b463ac32ba5d50b3d4d78fc9cdf468bb1c05306933b86986941ba49e1dcd941"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"error","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50"}
{"level":"error","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f"}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc"}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc"}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc"}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc"}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc"}
{"level":"debug","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd"}
{"level":"debug","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd"}
{"level":"debug","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b"}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59"}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08"}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08"}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca"}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca"}
{"level":"debug","ts":"2026-07-03T21:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc"}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08"}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b"}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"}
{"level":"debug","ts":"2026-07-03T21:17:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59"}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T21:17:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd"}
{"level":"debug","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f"}
{"level":"info","ts":"2026-07-03T21:17:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}
{"level":"info","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51856","PortSpecifier":{"PortValue":51856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51856","PortSpecifier":{"PortValue":51856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113469,"nanos":486498689},"http":{"id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b6db2e-40d9-4a06-bf1b-1965b7c3cf57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:37600","PortSpecifier":{"PortValue":37600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:37600","PortSpecifier":{"PortValue":37600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113469,"nanos":521348468},"http":{"id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/rate-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e81298-de58-4ccf-98b4-1c2ac1bb634c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51864","PortSpecifier":{"PortValue":51864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","method":"POST","path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51864","PortSpecifier":{"PortValue":51864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113469,"nanos":561098775},"http":{"id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MP6Jgpyn5khBCPQW_6eBEZzaB2PaCduPvtPZuLAfNS8KgQfDG0COD3m4wuh9"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MP6Jgpyn5khBCPQW_6eBEZzaB2PaCduPvtPZuLAfNS8KgQfDG0COD3m4wuh9\"}"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64a87205-e3c7-43ad-9994-868c336e442a","keyName":"e2e-rate-a-af53e1","subscription":"e2e-rate-iso-a-af53e1","tenant":"e2e-shared-a-1a4753","userId":"64a87205-e3c7-43ad-9994-868c336e442a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\",\"requestedSubscription\":\"e2e-rate-iso-a-af53e1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-af53e1","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-af53e1"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64a87205-e3c7-43ad-9994-868c336e442a","keyName":"e2e-rate-a-af53e1","selected_subscription":"e2e-rate-iso-a-af53e1","selected_subscription_key":"ai-tenant-e2e-shared-a-1a4753/e2e-rate-iso-a-af53e1@ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-af53e1","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:17:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aea60e3b-4c2c-41eb-91f0-904dc5c29904","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51872","PortSpecifier":{"PortValue":51872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b47245b5-1c7b-4561-bde6-c5bed7602306","method":"POST","path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51872","PortSpecifier":{"PortValue":51872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113470,"nanos":622305120},"http":{"id":"b47245b5-1c7b-4561-bde6-c5bed7602306","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MP6Jgpyn5khBCPQW_6eBEZzaB2PaCduPvtPZuLAfNS8KgQfDG0COD3m4wuh9"}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MP6Jgpyn5khBCPQW_6eBEZzaB2PaCduPvtPZuLAfNS8KgQfDG0COD3m4wuh9\"}"}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64a87205-e3c7-43ad-9994-868c336e442a","keyName":"e2e-rate-a-af53e1","subscription":"e2e-rate-iso-a-af53e1","tenant":"e2e-shared-a-1a4753","userId":"64a87205-e3c7-43ad-9994-868c336e442a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\",\"requestedSubscription\":\"e2e-rate-iso-a-af53e1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-af53e1","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-af53e1"}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64a87205-e3c7-43ad-9994-868c336e442a","keyName":"e2e-rate-a-af53e1","selected_subscription":"e2e-rate-iso-a-af53e1","selected_subscription_key":"ai-tenant-e2e-shared-a-1a4753/e2e-rate-iso-a-af53e1@ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-af53e1","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:17:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b47245b5-1c7b-4561-bde6-c5bed7602306","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51884","PortSpecifier":{"PortValue":51884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7559d98d-5dae-432f-ad82-96dd19ccee11","method":"POST","path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:51884","PortSpecifier":{"PortValue":51884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113471,"nanos":658279121},"http":{"id":"7559d98d-5dae-432f-ad82-96dd19ccee11","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MP6Jgpyn5khBCPQW_6eBEZzaB2PaCduPvtPZuLAfNS8KgQfDG0COD3m4wuh9"}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MP6Jgpyn5khBCPQW_6eBEZzaB2PaCduPvtPZuLAfNS8KgQfDG0COD3m4wuh9\"}"}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64a87205-e3c7-43ad-9994-868c336e442a","keyName":"e2e-rate-a-af53e1","subscription":"e2e-rate-iso-a-af53e1","tenant":"e2e-shared-a-1a4753","userId":"64a87205-e3c7-43ad-9994-868c336e442a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\",\"requestedSubscription\":\"e2e-rate-iso-a-af53e1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-af53e1","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-af53e1"}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64a87205-e3c7-43ad-9994-868c336e442a","keyName":"e2e-rate-a-af53e1","selected_subscription":"e2e-rate-iso-a-af53e1","selected_subscription_key":"ai-tenant-e2e-shared-a-1a4753/e2e-rate-iso-a-af53e1@ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-af53e1","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:17:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7559d98d-5dae-432f-ad82-96dd19ccee11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b036dc-fe20-49c6-85e4-a02909657880","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:56762","PortSpecifier":{"PortValue":56762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87b036dc-fe20-49c6-85e4-a02909657880","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b036dc-fe20-49c6-85e4-a02909657880","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:56762","PortSpecifier":{"PortValue":56762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113484,"nanos":524083741},"http":{"id":"87b036dc-fe20-49c6-85e4-a02909657880","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87b036dc-fe20-49c6-85e4-a02909657880","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87b036dc-fe20-49c6-85e4-a02909657880","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87b036dc-fe20-49c6-85e4-a02909657880","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b036dc-fe20-49c6-85e4-a02909657880","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b036dc-fe20-49c6-85e4-a02909657880","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b036dc-fe20-49c6-85e4-a02909657880","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87b036dc-fe20-49c6-85e4-a02909657880","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b036dc-fe20-49c6-85e4-a02909657880","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b036dc-fe20-49c6-85e4-a02909657880","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b036dc-fe20-49c6-85e4-a02909657880","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b036dc-fe20-49c6-85e4-a02909657880","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:48288","PortSpecifier":{"PortValue":48288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:48288","PortSpecifier":{"PortValue":48288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113484,"nanos":564839593},"http":{"id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"]}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb6cd90e8fa8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5b0b48e2-132e-4395-acdb-80e1c1cd8071"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66e3dc1d-128f-4adf-adce-aefd83d68bfd","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/rate-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71edec45-9bb3-4359-82f7-d3a77581eaa2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:56778","PortSpecifier":{"PortValue":56778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","method":"POST","path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:56778","PortSpecifier":{"PortValue":56778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113484,"nanos":598153631},"http":{"id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18rzmXCaZYRaRAprE_AP5khQlWWvwFIEVL4rvtEMh1lk8V5nf65XHZQ91ZRtf"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18rzmXCaZYRaRAprE_AP5khQlWWvwFIEVL4rvtEMh1lk8V5nf65XHZQ91ZRtf\"}"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9f69710a-babb-4154-9e85-c5eb60b57f86","keyName":"e2e-rate-a-5c20aa","subscription":"e2e-rate-iso-a-5c20aa","tenant":"e2e-shared-a-1a4753","userId":"9f69710a-babb-4154-9e85-c5eb60b57f86","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\",\"requestedSubscription\":\"e2e-rate-iso-a-5c20aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5c20aa","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5c20aa"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9f69710a-babb-4154-9e85-c5eb60b57f86","keyName":"e2e-rate-a-5c20aa","selected_subscription":"e2e-rate-iso-a-5c20aa","selected_subscription_key":"ai-tenant-e2e-shared-a-1a4753/e2e-rate-iso-a-5c20aa@ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5c20aa","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:18:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7c08e5d-a4f9-4234-a8a3-d3ec41050d5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:56788","PortSpecifier":{"PortValue":56788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","method":"POST","path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:56788","PortSpecifier":{"PortValue":56788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113485,"nanos":638022793},"http":{"id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18rzmXCaZYRaRAprE_AP5khQlWWvwFIEVL4rvtEMh1lk8V5nf65XHZQ91ZRtf"}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18rzmXCaZYRaRAprE_AP5khQlWWvwFIEVL4rvtEMh1lk8V5nf65XHZQ91ZRtf\"}"}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9f69710a-babb-4154-9e85-c5eb60b57f86","keyName":"e2e-rate-a-5c20aa","subscription":"e2e-rate-iso-a-5c20aa","tenant":"e2e-shared-a-1a4753","userId":"9f69710a-babb-4154-9e85-c5eb60b57f86","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\",\"requestedSubscription\":\"e2e-rate-iso-a-5c20aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5c20aa","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5c20aa"}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9f69710a-babb-4154-9e85-c5eb60b57f86","keyName":"e2e-rate-a-5c20aa","selected_subscription":"e2e-rate-iso-a-5c20aa","selected_subscription_key":"ai-tenant-e2e-shared-a-1a4753/e2e-rate-iso-a-5c20aa@ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5c20aa","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:18:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab4ef665-0e4b-4501-9f9c-bf3d3d0c592d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:56794","PortSpecifier":{"PortValue":56794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67f33c3c-80e9-4237-a085-e92bcb84813d","method":"POST","path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions","host":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:56794","PortSpecifier":{"PortValue":56794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113486,"nanos":700660669},"http":{"id":"67f33c3c-80e9-4237-a085-e92bcb84813d","method":"POST","headers":{":authority":"e2e-shared-a-1a4753.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18rzmXCaZYRaRAprE_AP5khQlWWvwFIEVL4rvtEMh1lk8V5nf65XHZQ91ZRtf"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18rzmXCaZYRaRAprE_AP5khQlWWvwFIEVL4rvtEMh1lk8V5nf65XHZQ91ZRtf\"}"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9f69710a-babb-4154-9e85-c5eb60b57f86","keyName":"e2e-rate-a-5c20aa","subscription":"e2e-rate-iso-a-5c20aa","tenant":"e2e-shared-a-1a4753","userId":"9f69710a-babb-4154-9e85-c5eb60b57f86","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\",\"requestedSubscription\":\"e2e-rate-iso-a-5c20aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1a4753.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5c20aa","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5c20aa"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9f69710a-babb-4154-9e85-c5eb60b57f86","keyName":"e2e-rate-a-5c20aa","selected_subscription":"e2e-rate-iso-a-5c20aa","selected_subscription_key":"ai-tenant-e2e-shared-a-1a4753/e2e-rate-iso-a-5c20aa@ai-tenant-e2e-shared-a-1a4753/rate-test-model-1a4753","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1a4753","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5c20aa","namespace":"ai-tenant-e2e-shared-a-1a4753","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67f33c3c-80e9-4237-a085-e92bcb84813d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46977107-5daf-46fd-8ea2-aa441c638883","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:48300","PortSpecifier":{"PortValue":48300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46977107-5daf-46fd-8ea2-aa441c638883","method":"POST","path":"/ai-tenant-e2e-shared-b-26641f/rate-test-model-26641f/v1/completions","host":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46977107-5daf-46fd-8ea2-aa441c638883","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:48300","PortSpecifier":{"PortValue":48300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783113486,"nanos":740073518},"http":{"id":"46977107-5daf-46fd-8ea2-aa441c638883","method":"POST","headers":{":authority":"e2e-shared-b-26641f.apps.5aebffbc-8351-40ad-9bfe-fb6cd90e8fa8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-26641f/rate-test-model-26641f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-b6kJE3qdCS6CsobB_wDN8fot096pEZwRbtHUAjEbXjTUNnrBSloDGDoUUhNr"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-b6kJE3qdCS6CsobB_wDN8fot096pEZwRbtHUAjEbXjTUNnrBSloDGDoUUhNr\"}"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"11536e4f-5a0f-407d-af9d-ab59aa049683","keyName":"e2e-rate-b-5c20aa","subscription":"e2e-rate-iso-b-5c20aa","tenant":"e2e-shared-b-26641f","userId":"11536e4f-5a0f-407d-af9d-ab59aa049683","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-26641f/rate-test-model-26641f\",\"requestedSubscription\":\"e2e-rate-iso-b-5c20aa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-26641f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-26641f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5c20aa","namespace":"ai-tenant-e2e-shared-b-26641f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46977107-5daf-46fd-8ea2-aa441c638883","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-26641f/rate-test-model-26641f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-5c20aa"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46977107-5daf-46fd-8ea2-aa441c638883","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"11536e4f-5a0f-407d-af9d-ab59aa049683","keyName":"e2e-rate-b-5c20aa","selected_subscription":"e2e-rate-iso-b-5c20aa","selected_subscription_key":"ai-tenant-e2e-shared-b-26641f/e2e-rate-iso-b-5c20aa@ai-tenant-e2e-shared-b-26641f/rate-test-model-26641f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-26641f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5c20aa","namespace":"ai-tenant-e2e-shared-b-26641f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46977107-5daf-46fd-8ea2-aa441c638883","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T21:18:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46977107-5daf-46fd-8ea2-aa441c638883","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T21:18:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d0c6705720296e6b994f28d66ba211bb8f93aad90851d6baa58135bfd9bda50"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/676938d0554292ee620122711ed3f0493b583a9687a02b7608479cdd3a22152f"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/423411ae28c5a313a908a670be969723bfb84e136ba384e913eea9ac995c9b45"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b5e8e8c67f896726d39aeac6a8314cb299616678b65899babc069dad52b3313"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2a378fd877083e4af0a2528984d0c4b23c6c5d3b5bb6fdd07c58d070707648e"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a27f3d47378f71cfbf84df78320a906ef4710182e120ec98cf1598a366937f59"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d293e2df452dc662e3124d7dc254f5ca0ae75952d3c5b5df86553bfd76abef3"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2803911fc036011f17b576eb5ac9a2617761318f2391fff31d24c54724e2a4ca"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e4d7a31f16dac7fbdeda76c1ab64571f69278beb7cf410e580412c30128cf82"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd18559698e3de0d4dd55c0d2cc20cff31c7940847f256670253c963549da7cb"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db574097ffad738c1e7db17f94579b4cff22a7e1fd33a4c78b73167faeeb0dfd"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14bcbeb93a618f7789e9a3efe515bd95a1095522f54f200830f515dc6dfc9815"}
{"level":"info","ts":"2026-07-03T21:18:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9668a5cca3429f08feb6d147f22fd7ffeffc92a1c524eb545e83c20ad13357f"}
{"level":"info","ts":"2026-07-03T21:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f20d7bcc61cf755796b6c17bf675f37831e879bd7135506dd10eb9182d1e54b"}
{"level":"info","ts":"2026-07-03T21:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a3a0bf0f7d03ccae7a84dbfa319b0dbbe0b645320acba36b13cb5c8e9709a08"}
{"level":"info","ts":"2026-07-03T21:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88126cbb9eb08a905192b81c293fce06a70d3d235a5cf804c474a513901c9484"}
{"level":"info","ts":"2026-07-03T21:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbe71d92fd8c461405db5694b2e122d9b93d35cef1e7217338fec36ab13b28ac"}
{"level":"info","ts":"2026-07-03T21:18:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9dc8e2835a3a54034ff70b499d29f88ba16c5f71bd0e5c5543caf0e30359acc"}
{"level":"info","ts":"2026-07-03T21:18:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8479bddbf2881cc3215242b6e00245c993f804901eea70c141341522613cfe9"}
{"level":"info","ts":"2026-07-03T21:18:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21b8d4c4d2090523845344b26bc239dbf868eacaba9c8613edafa266c4b7026b"}