--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-28T01:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a63e89a5bc736232b80624c8b656dfc30a44cfcd3ba6c82266851fadb72bdc7e"}
{"level":"debug","ts":"2026-07-28T01:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a63e89a5bc736232b80624c8b656dfc30a44cfcd3ba6c82266851fadb72bdc7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a63e89a5bc736232b80624c8b656dfc30a44cfcd3ba6c82266851fadb72bdc7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a63e89a5bc736232b80624c8b656dfc30a44cfcd3ba6c82266851fadb72bdc7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a63e89a5bc736232b80624c8b656dfc30a44cfcd3ba6c82266851fadb72bdc7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a63e89a5bc736232b80624c8b656dfc30a44cfcd3ba6c82266851fadb72bdc7e"}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"debug","ts":"2026-07-28T01:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:34788","PortSpecifier":{"PortValue":34788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b83c290a-b8ea-4661-ba63-42f74c47f684","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:34788","PortSpecifier":{"PortValue":34788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203497,"nanos":68480411},"http":{"id":"b83c290a-b8ea-4661-ba63-42f74c47f684","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/auth-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b83c290a-b8ea-4661-ba63-42f74c47f684","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:36350","PortSpecifier":{"PortValue":36350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c38dba7e-bf62-4816-9281-33db88c6e577","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:36350","PortSpecifier":{"PortValue":36350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203497,"nanos":106501848},"http":{"id":"c38dba7e-bf62-4816-9281-33db88c6e577","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/auth-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c38dba7e-bf62-4816-9281-33db88c6e577","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:34792","PortSpecifier":{"PortValue":34792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:34792","PortSpecifier":{"PortValue":34792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203497,"nanos":145407201},"http":{"id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/auth-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e6a22b8-b204-453c-97a3-8fadf5894d34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:36356","PortSpecifier":{"PortValue":36356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1968561-32c9-4a9b-a21c-213deaf559f9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:36356","PortSpecifier":{"PortValue":36356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203497,"nanos":177487587},"http":{"id":"f1968561-32c9-4a9b-a21c-213deaf559f9","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/auth-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:51:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1968561-32c9-4a9b-a21c-213deaf559f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"debug","ts":"2026-07-28T01:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"error","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"info","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80d11904-a860-4f74-be43-60e446d365cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:46350","PortSpecifier":{"PortValue":46350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80d11904-a860-4f74-be43-60e446d365cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80d11904-a860-4f74-be43-60e446d365cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:46350","PortSpecifier":{"PortValue":46350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203532,"nanos":830417877},"http":{"id":"80d11904-a860-4f74-be43-60e446d365cd","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80d11904-a860-4f74-be43-60e446d365cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80d11904-a860-4f74-be43-60e446d365cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80d11904-a860-4f74-be43-60e446d365cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d11904-a860-4f74-be43-60e446d365cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d11904-a860-4f74-be43-60e446d365cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d11904-a860-4f74-be43-60e446d365cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/auth-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80d11904-a860-4f74-be43-60e446d365cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80d11904-a860-4f74-be43-60e446d365cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80d11904-a860-4f74-be43-60e446d365cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80d11904-a860-4f74-be43-60e446d365cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80d11904-a860-4f74-be43-60e446d365cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57396","PortSpecifier":{"PortValue":57396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc531876-a3bc-4290-86d2-763a84b2023c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57396","PortSpecifier":{"PortValue":57396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203532,"nanos":865599031},"http":{"id":"dc531876-a3bc-4290-86d2-763a84b2023c","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/auth-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc531876-a3bc-4290-86d2-763a84b2023c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57402","PortSpecifier":{"PortValue":57402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","method":"GET","path":"/maas-api/v1/api-keys/6241cbc0-9d10-48da-a29e-a8bac1cc3a28","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:57402","PortSpecifier":{"PortValue":57402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203532,"nanos":907997587},"http":{"id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","method":"GET","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6241cbc0-9d10-48da-a29e-a8bac1cc3a28",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6241cbc0-9d10-48da-a29e-a8bac1cc3a28",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/auth-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"478d3ec9-de9b-49ec-8715-ea56fdbf6d81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:46364","PortSpecifier":{"PortValue":46364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f020f214-caeb-4d79-87c0-ce7961d3d744","method":"GET","path":"/maas-api/v1/api-keys/6241cbc0-9d10-48da-a29e-a8bac1cc3a28","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:46364","PortSpecifier":{"PortValue":46364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203532,"nanos":938479077},"http":{"id":"f020f214-caeb-4d79-87c0-ce7961d3d744","method":"GET","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6241cbc0-9d10-48da-a29e-a8bac1cc3a28",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6241cbc0-9d10-48da-a29e-a8bac1cc3a28",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/auth-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f020f214-caeb-4d79-87c0-ce7961d3d744","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"error","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"debug","ts":"2026-07-28T01:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:53674","PortSpecifier":{"PortValue":53674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:53674","PortSpecifier":{"PortValue":53674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203570,"nanos":685419168},"http":{"id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/auth-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea3b0184-b2e3-4f50-b22a-74de6e71e0a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48802","PortSpecifier":{"PortValue":48802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48802","PortSpecifier":{"PortValue":48802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203570,"nanos":746023007},"http":{"id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/auth-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1dd1a53-ac25-4bb0-809f-c6aec35fe100","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:53690","PortSpecifier":{"PortValue":53690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:53690","PortSpecifier":{"PortValue":53690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203570,"nanos":785690228},"http":{"id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W4Y5V2W0LVrPYwDa_GAVcIKgYJl9oG3UQtiRbYWnI574Yz21zZDmnRDcB5YU"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W4Y5V2W0LVrPYwDa_GAVcIKgYJl9oG3UQtiRbYWnI574Yz21zZDmnRDcB5YU\"}"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d6e78f0-9ea3-4107-a774-fb341ac76348","keyName":"e2e-auth-iso-a-93ac04","subscription":"e2e-auth-iso-8b508f","tenant":"e2e-shared-a-0337e8","userId":"3d6e78f0-9ea3-4107-a774-fb341ac76348","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/auth-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8b508f"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"836e87f6-08c0-4bbf-99f6-0f9ddc0d2ef5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f49f85da66b01f77db86af686b4bc6a9e942566099a16c40b479b11f27fd03cb"}
{"level":"info","ts":"2026-07-28T01:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45e527109b24926ad6fad5f041d0e014470c56b14829a9e045b60213d21b42a8"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df57c5de7c85125ef3ec900f391fb6f30df13d3d43dccf9d66940390e9f382d5"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b8714e370ef72105308a79aeecd5500c4c61141c16d6d0d02b30da00a893f91"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/404917c91ec97380f64adb720c0fac91f75eee93f15a7f8dc03d62959c25422c"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b7a0384ce4641fdccf2afbb3a80bc3d2cc57063774d00299b32f5cde53f171f"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30c68d4d1730f6eebd8ec53c1f2cb10adefcbafe0ad56ca0f9c32e044a4d16c"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21571fbeac541782c730e2e7ac7ae77e2146dc5142e841068ad0fd824bdf3f02"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/276d8b8c9e8a7d492d3cf15f3e96baecd89fff5d46f14b8a9d7a18aa722c94c0"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/577e1ba702e9330dbe88e9cebba84bb2021a6abc21a515bbf24cea464dcc26b9"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4575e14b9549139ccda1f5762f102c19e6de1a15408ab9c93c463a03b87b269a"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8521e3dab547567523e8c9026c291e8e3c5f1c3dca2b26b7ea3486166edee4fc"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a63e89a5bc736232b80624c8b656dfc30a44cfcd3ba6c82266851fadb72bdc7e"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37016d2a090519328330db651eb94f1fee051c1e1b013dde87805386b9b4b0ff"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f78f41669e511f16761ff3d8a26add932600da1ac1b0f646b7bbae7b27b4be9"}
{"level":"info","ts":"2026-07-28T01:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df67b3f579ea4dd69c874ac0416130d2d2af5ee89217c3c87759fc72e6e4aa75"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9acdafe163e7ece096f4dcf327c18fde6f6a1001cd54a959691ea35cd9a5e9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9acdafe163e7ece096f4dcf327c18fde6f6a1001cd54a959691ea35cd9a5e9b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aee1f33ed36ab545b74451bb3080af2c53f58b91e184dd270c6c365a8c14e9d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aee1f33ed36ab545b74451bb3080af2c53f58b91e184dd270c6c365a8c14e9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9acdafe163e7ece096f4dcf327c18fde6f6a1001cd54a959691ea35cd9a5e9b2"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aee1f33ed36ab545b74451bb3080af2c53f58b91e184dd270c6c365a8c14e9d5"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9acdafe163e7ece096f4dcf327c18fde6f6a1001cd54a959691ea35cd9a5e9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9acdafe163e7ece096f4dcf327c18fde6f6a1001cd54a959691ea35cd9a5e9b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9acdafe163e7ece096f4dcf327c18fde6f6a1001cd54a959691ea35cd9a5e9b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aee1f33ed36ab545b74451bb3080af2c53f58b91e184dd270c6c365a8c14e9d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aee1f33ed36ab545b74451bb3080af2c53f58b91e184dd270c6c365a8c14e9d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aee1f33ed36ab545b74451bb3080af2c53f58b91e184dd270c6c365a8c14e9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7342570255192d4fcdbaefd53472ca31e5f6f7e64fbb648ec514f503830d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7342570255192d4fcdbaefd53472ca31e5f6f7e64fbb648ec514f503830d89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"332d54be7bee25b2b9b7dc054d015a4b31ab911deb0fd2d1d6e5e71243e40190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"332d54be7bee25b2b9b7dc054d015a4b31ab911deb0fd2d1d6e5e71243e40190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9acdafe163e7ece096f4dcf327c18fde6f6a1001cd54a959691ea35cd9a5e9b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0590b5b2d1e7cf291f2db05c1ef580d60a40231917f24590358498fc4261ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0590b5b2d1e7cf291f2db05c1ef580d60a40231917f24590358498fc4261ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aee1f33ed36ab545b74451bb3080af2c53f58b91e184dd270c6c365a8c14e9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f218e2a92d977dc84baad8c06f762deaabe22dfb3f8a9e37ff925ab6bb0ce6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7342570255192d4fcdbaefd53472ca31e5f6f7e64fbb648ec514f503830d89"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f218e2a92d977dc84baad8c06f762deaabe22dfb3f8a9e37ff925ab6bb0ce6d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332d54be7bee25b2b9b7dc054d015a4b31ab911deb0fd2d1d6e5e71243e40190"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7342570255192d4fcdbaefd53472ca31e5f6f7e64fbb648ec514f503830d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7342570255192d4fcdbaefd53472ca31e5f6f7e64fbb648ec514f503830d89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7342570255192d4fcdbaefd53472ca31e5f6f7e64fbb648ec514f503830d89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9acdafe163e7ece096f4dcf327c18fde6f6a1001cd54a959691ea35cd9a5e9b2"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0590b5b2d1e7cf291f2db05c1ef580d60a40231917f24590358498fc4261ce"}
{"level":"info","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"332d54be7bee25b2b9b7dc054d015a4b31ab911deb0fd2d1d6e5e71243e40190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["332d54be7bee25b2b9b7dc054d015a4b31ab911deb0fd2d1d6e5e71243e40190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"332d54be7bee25b2b9b7dc054d015a4b31ab911deb0fd2d1d6e5e71243e40190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f7ef1d4a7489ab7b61ee636b818b6af9efdfbf5da8a44c0b0246bd307553b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aee1f33ed36ab545b74451bb3080af2c53f58b91e184dd270c6c365a8c14e9d5"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f218e2a92d977dc84baad8c06f762deaabe22dfb3f8a9e37ff925ab6bb0ce6d5"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f7ef1d4a7489ab7b61ee636b818b6af9efdfbf5da8a44c0b0246bd307553b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0590b5b2d1e7cf291f2db05c1ef580d60a40231917f24590358498fc4261ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0590b5b2d1e7cf291f2db05c1ef580d60a40231917f24590358498fc4261ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0590b5b2d1e7cf291f2db05c1ef580d60a40231917f24590358498fc4261ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f7ef1d4a7489ab7b61ee636b818b6af9efdfbf5da8a44c0b0246bd307553b19"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7342570255192d4fcdbaefd53472ca31e5f6f7e64fbb648ec514f503830d89"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/332d54be7bee25b2b9b7dc054d015a4b31ab911deb0fd2d1d6e5e71243e40190"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0590b5b2d1e7cf291f2db05c1ef580d60a40231917f24590358498fc4261ce"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f218e2a92d977dc84baad8c06f762deaabe22dfb3f8a9e37ff925ab6bb0ce6d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f218e2a92d977dc84baad8c06f762deaabe22dfb3f8a9e37ff925ab6bb0ce6d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f218e2a92d977dc84baad8c06f762deaabe22dfb3f8a9e37ff925ab6bb0ce6d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7342570255192d4fcdbaefd53472ca31e5f6f7e64fbb648ec514f503830d89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f218e2a92d977dc84baad8c06f762deaabe22dfb3f8a9e37ff925ab6bb0ce6d5"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"332d54be7bee25b2b9b7dc054d015a4b31ab911deb0fd2d1d6e5e71243e40190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f7ef1d4a7489ab7b61ee636b818b6af9efdfbf5da8a44c0b0246bd307553b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f7ef1d4a7489ab7b61ee636b818b6af9efdfbf5da8a44c0b0246bd307553b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f7ef1d4a7489ab7b61ee636b818b6af9efdfbf5da8a44c0b0246bd307553b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0590b5b2d1e7cf291f2db05c1ef580d60a40231917f24590358498fc4261ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f7ef1d4a7489ab7b61ee636b818b6af9efdfbf5da8a44c0b0246bd307553b19"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f218e2a92d977dc84baad8c06f762deaabe22dfb3f8a9e37ff925ab6bb0ce6d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f7ef1d4a7489ab7b61ee636b818b6af9efdfbf5da8a44c0b0246bd307553b19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf"}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:53:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf"}
{"level":"error","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:53:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48934","PortSpecifier":{"PortValue":48934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31c98337-3f4d-427e-87aa-b126a4eab26a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48934","PortSpecifier":{"PortValue":48934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203655,"nanos":71954224},"http":{"id":"31c98337-3f4d-427e-87aa-b126a4eab26a","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/sub-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c98337-3f4d-427e-87aa-b126a4eab26a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:44112","PortSpecifier":{"PortValue":44112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a05ea2f-0e95-44b2-ab97-479616146007","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:44112","PortSpecifier":{"PortValue":44112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203655,"nanos":112028839},"http":{"id":"8a05ea2f-0e95-44b2-ab97-479616146007","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/sub-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a05ea2f-0e95-44b2-ab97-479616146007","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48936","PortSpecifier":{"PortValue":48936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48936","PortSpecifier":{"PortValue":48936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203655,"nanos":149191304},"http":{"id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","method":"GET","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1G8fhuFAinAA4kb5q_DTBy4Z0cPeXvbDgUVZwM68zCwiNfY5Fi23yftAbygDu"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1G8fhuFAinAA4kb5q_DTBy4Z0cPeXvbDgUVZwM68zCwiNfY5Fi23yftAbygDu\"}"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1981376e-efce-4a71-ae9d-41f32dc785cb","keyName":"e2e-sub-iso-263c38","subscription":"e2e-a-only-65b1a1","tenant":"e2e-shared-a-0337e8","userId":"1981376e-efce-4a71-ae9d-41f32dc785cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/sub-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-65b1a1"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07e4cff1-4448-45b3-9ae9-6302e9a30b7b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:44128","PortSpecifier":{"PortValue":44128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:44128","PortSpecifier":{"PortValue":44128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203655,"nanos":193599723},"http":{"id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","method":"GET","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Vv1Li6j1u5dr4YwJ_vF4Jq2H32hH6NhHsbP20YQ8ZgHwt8wX6tSr9YfRoPk8"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Vv1Li6j1u5dr4YwJ_vF4Jq2H32hH6NhHsbP20YQ8ZgHwt8wX6tSr9YfRoPk8\"}"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4c528cc-0bf8-4955-aa35-f26ea17cfbe8","keyName":"e2e-sub-iso-b1672c","subscription":"e2e-b-only-65b1a1","tenant":"e2e-shared-b-44b320","userId":"e4c528cc-0bf8-4955-aa35-f26ea17cfbe8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/sub-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-65b1a1"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fd6ca90-6fd2-4c53-b0e0-aee78470eab9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0680b5f8-653e-4163-af88-ee459d577337","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:39128","PortSpecifier":{"PortValue":39128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0680b5f8-653e-4163-af88-ee459d577337","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0680b5f8-653e-4163-af88-ee459d577337","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:39128","PortSpecifier":{"PortValue":39128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203674,"nanos":755451046},"http":{"id":"0680b5f8-653e-4163-af88-ee459d577337","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0680b5f8-653e-4163-af88-ee459d577337","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0680b5f8-653e-4163-af88-ee459d577337","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0680b5f8-653e-4163-af88-ee459d577337","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0680b5f8-653e-4163-af88-ee459d577337","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0680b5f8-653e-4163-af88-ee459d577337","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0680b5f8-653e-4163-af88-ee459d577337","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/sub-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0680b5f8-653e-4163-af88-ee459d577337","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0680b5f8-653e-4163-af88-ee459d577337","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0680b5f8-653e-4163-af88-ee459d577337","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0680b5f8-653e-4163-af88-ee459d577337","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0680b5f8-653e-4163-af88-ee459d577337","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:40884","PortSpecifier":{"PortValue":40884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:40884","PortSpecifier":{"PortValue":40884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203674,"nanos":805601893},"http":{"id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/sub-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b3c639f-3ddb-40aa-92ce-1c3ae5ec37ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:39134","PortSpecifier":{"PortValue":39134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a15fc284-5494-4e2c-99d8-03cc36915f27","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:39134","PortSpecifier":{"PortValue":39134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203674,"nanos":845510546},"http":{"id":"a15fc284-5494-4e2c-99d8-03cc36915f27","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16ebB0BHQd3izqR6D_KnJytDgjSWpCKjLdaa0z3ZzuxzAvIwo3JNNcZrnZ7mF"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16ebB0BHQd3izqR6D_KnJytDgjSWpCKjLdaa0z3ZzuxzAvIwo3JNNcZrnZ7mF\"}"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4485bacb-9c02-45cc-8c46-7679f52c7017","keyName":"e2e-sub-iso-d1a61a","subscription":"e2e-shared-sub-e6971a","tenant":"e2e-shared-a-0337e8","userId":"4485bacb-9c02-45cc-8c46-7679f52c7017","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/sub-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e6971a"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a15fc284-5494-4e2c-99d8-03cc36915f27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:40892","PortSpecifier":{"PortValue":40892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:40892","PortSpecifier":{"PortValue":40892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203674,"nanos":874849199},"http":{"id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4WEidsYLLBM2mnpM_l2dasmTXaFomAXhKZjxqV3MuAvC2q4kKCyDfWcQiKJB"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4WEidsYLLBM2mnpM_l2dasmTXaFomAXhKZjxqV3MuAvC2q4kKCyDfWcQiKJB\"}"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6cf72bfa-c651-4268-aea6-2579ed8ca914","keyName":"e2e-sub-iso-2fd2c0","subscription":"e2e-shared-sub-e6971a","tenant":"e2e-shared-b-44b320","userId":"6cf72bfa-c651-4268-aea6-2579ed8ca914","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/sub-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e6971a"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04bb1f04-d268-498c-bd0f-50a7a20adaaa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aee1f33ed36ab545b74451bb3080af2c53f58b91e184dd270c6c365a8c14e9d5"}
{"level":"info","ts":"2026-07-28T01:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fdf0e67816e53d1d61c265e6fc5af43ea789171fbe4c16898304997114772e4"}
{"level":"info","ts":"2026-07-28T01:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/809d84728656b7a8a0581a4f3aa2b866e35f88fcac057870c2cfd7e15891ab2c"}
{"level":"info","ts":"2026-07-28T01:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f218e2a92d977dc84baad8c06f762deaabe22dfb3f8a9e37ff925ab6bb0ce6d5"}
{"level":"info","ts":"2026-07-28T01:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"}
{"level":"info","ts":"2026-07-28T01:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d0590b5b2d1e7cf291f2db05c1ef580d60a40231917f24590358498fc4261ce"}
{"level":"info","ts":"2026-07-28T01:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3ffbe693e41b4b27b5f32706d4dfd1b1a12b4c204d0b100f7457b599d3b7731"}
{"level":"info","ts":"2026-07-28T01:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"}
{"level":"info","ts":"2026-07-28T01:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5872ce1f8e34c62097fbcaac2285bea4ebf5ab15aac6f1d3ba9b49c1084a5abf"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/953e8d9785cfbe407959f69d50b5913953f5eec8d35163ed591fba626cf87c8b"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec1918ac0c2a83c25ddeb91c9948a852b2d21e55ac95f5225e9433834d3e5f59"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9acdafe163e7ece096f4dcf327c18fde6f6a1001cd54a959691ea35cd9a5e9b2"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe5681bb05e0acecd291a9dadfd93b5a9513b70628237a76fa5d6c52e5efdb65"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30426cd05eef75312a4ef68ea7dfbfd1581623160d0f4ba6d165daeb027f2f6c"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5a4ededff33839be9efd2e9a27ff444854b7f8c7b83006383eadcd93e04a8ec"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab7342570255192d4fcdbaefd53472ca31e5f6f7e64fbb648ec514f503830d89"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f7ef1d4a7489ab7b61ee636b818b6af9efdfbf5da8a44c0b0246bd307553b19"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/332d54be7bee25b2b9b7dc054d015a4b31ab911deb0fd2d1d6e5e71243e40190"}
{"level":"info","ts":"2026-07-28T01:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311"}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311"}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6"}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b"}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d"}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2"}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c"}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:55:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"error","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48494","PortSpecifier":{"PortValue":48494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71d29f80-fd84-4284-a965-c561b0c3537c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48494","PortSpecifier":{"PortValue":48494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203768,"nanos":929913818},"http":{"id":"71d29f80-fd84-4284-a965-c561b0c3537c","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71d29f80-fd84-4284-a965-c561b0c3537c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:58948","PortSpecifier":{"PortValue":58948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:58948","PortSpecifier":{"PortValue":58948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203768,"nanos":967532048},"http":{"id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e1b2a49-59d0-49c6-a986-aeb08ce5cef9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48510","PortSpecifier":{"PortValue":48510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d61f453d-e470-48ce-870a-55a2e444adfd","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:48510","PortSpecifier":{"PortValue":48510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203769,"nanos":5108622},"http":{"id":"d61f453d-e470-48ce-870a-55a2e444adfd","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-maCYpPw2CJYvwtq_FuWkBZU2tMYD3CfOgJ8Au7HjXvfDl1gXm8NeDxpPpu0"}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-maCYpPw2CJYvwtq_FuWkBZU2tMYD3CfOgJ8Au7HjXvfDl1gXm8NeDxpPpu0\"}"}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48585319-9145-458f-9a24-aeea69d05cce","keyName":"e2e-rate-a-a01923","subscription":"e2e-rate-iso-a-a01923","tenant":"e2e-shared-a-0337e8","userId":"48585319-9145-458f-9a24-aeea69d05cce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-a01923\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a01923","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a01923"}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48585319-9145-458f-9a24-aeea69d05cce","keyName":"e2e-rate-a-a01923","selected_subscription":"e2e-rate-iso-a-a01923","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-a01923@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a01923","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61f453d-e470-48ce-870a-55a2e444adfd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:51342","PortSpecifier":{"PortValue":51342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:51342","PortSpecifier":{"PortValue":51342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203770,"nanos":93031502},"http":{"id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-maCYpPw2CJYvwtq_FuWkBZU2tMYD3CfOgJ8Au7HjXvfDl1gXm8NeDxpPpu0"}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-maCYpPw2CJYvwtq_FuWkBZU2tMYD3CfOgJ8Au7HjXvfDl1gXm8NeDxpPpu0\"}"}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48585319-9145-458f-9a24-aeea69d05cce","keyName":"e2e-rate-a-a01923","subscription":"e2e-rate-iso-a-a01923","tenant":"e2e-shared-a-0337e8","userId":"48585319-9145-458f-9a24-aeea69d05cce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-a01923\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a01923","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a01923"}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48585319-9145-458f-9a24-aeea69d05cce","keyName":"e2e-rate-a-a01923","selected_subscription":"e2e-rate-iso-a-a01923","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-a01923@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a01923","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76032566-aa89-47f6-a2fa-39e6c8d03b6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:51344","PortSpecifier":{"PortValue":51344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdf41a84-0f62-4a99-8554-55186e6776b9","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:51344","PortSpecifier":{"PortValue":51344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203771,"nanos":136340500},"http":{"id":"bdf41a84-0f62-4a99-8554-55186e6776b9","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-maCYpPw2CJYvwtq_FuWkBZU2tMYD3CfOgJ8Au7HjXvfDl1gXm8NeDxpPpu0"}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-maCYpPw2CJYvwtq_FuWkBZU2tMYD3CfOgJ8Au7HjXvfDl1gXm8NeDxpPpu0\"}"}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48585319-9145-458f-9a24-aeea69d05cce","keyName":"e2e-rate-a-a01923","subscription":"e2e-rate-iso-a-a01923","tenant":"e2e-shared-a-0337e8","userId":"48585319-9145-458f-9a24-aeea69d05cce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-a01923\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a01923","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a01923"}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48585319-9145-458f-9a24-aeea69d05cce","keyName":"e2e-rate-a-a01923","selected_subscription":"e2e-rate-iso-a-a01923","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-a01923@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a01923","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdf41a84-0f62-4a99-8554-55186e6776b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38428","PortSpecifier":{"PortValue":38428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38428","PortSpecifier":{"PortValue":38428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203790,"nanos":234435821},"http":{"id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b0a8a72-e4a9-4919-900d-24c06a57d987","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8745abc-3f00-4b35-b741-248b040034ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43056","PortSpecifier":{"PortValue":43056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8745abc-3f00-4b35-b741-248b040034ba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8745abc-3f00-4b35-b741-248b040034ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43056","PortSpecifier":{"PortValue":43056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203790,"nanos":266941248},"http":{"id":"a8745abc-3f00-4b35-b741-248b040034ba","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8745abc-3f00-4b35-b741-248b040034ba","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8745abc-3f00-4b35-b741-248b040034ba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8745abc-3f00-4b35-b741-248b040034ba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8745abc-3f00-4b35-b741-248b040034ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8745abc-3f00-4b35-b741-248b040034ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38444","PortSpecifier":{"PortValue":38444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b453630-f2cc-497a-941c-789bc9e131c9","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38444","PortSpecifier":{"PortValue":38444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203790,"nanos":294989016},"http":{"id":"8b453630-f2cc-497a-941c-789bc9e131c9","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b453630-f2cc-497a-941c-789bc9e131c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38456","PortSpecifier":{"PortValue":38456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38456","PortSpecifier":{"PortValue":38456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203791,"nanos":332058347},"http":{"id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43d7b00-0350-45af-a5fd-bc6d933c389e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc6e274a-122d-426e-8959-296392eea4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38472","PortSpecifier":{"PortValue":38472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc6e274a-122d-426e-8959-296392eea4a2","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc6e274a-122d-426e-8959-296392eea4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38472","PortSpecifier":{"PortValue":38472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203792,"nanos":372150061},"http":{"id":"dc6e274a-122d-426e-8959-296392eea4a2","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc6e274a-122d-426e-8959-296392eea4a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc6e274a-122d-426e-8959-296392eea4a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc6e274a-122d-426e-8959-296392eea4a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc6e274a-122d-426e-8959-296392eea4a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38478","PortSpecifier":{"PortValue":38478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38478","PortSpecifier":{"PortValue":38478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203793,"nanos":408534615},"http":{"id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f76ac6d3-4ffb-90cc-9e02-ba2a3b15cf79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38484","PortSpecifier":{"PortValue":38484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38484","PortSpecifier":{"PortValue":38484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203794,"nanos":445794831},"http":{"id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d50fb74-a939-45f4-bfa7-e1fc807f20de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38486","PortSpecifier":{"PortValue":38486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38486","PortSpecifier":{"PortValue":38486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203795,"nanos":481683169},"http":{"id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da44297a-a6dd-4877-a8dc-b4c9c7a8767f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38492","PortSpecifier":{"PortValue":38492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da343815-c9cd-4d65-a696-a98f7b925ed6","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38492","PortSpecifier":{"PortValue":38492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203796,"nanos":517888380},"http":{"id":"da343815-c9cd-4d65-a696-a98f7b925ed6","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da343815-c9cd-4d65-a696-a98f7b925ed6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38494","PortSpecifier":{"PortValue":38494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","method":"POST","path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions","host":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38494","PortSpecifier":{"PortValue":38494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203797,"nanos":551974338},"http":{"id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","method":"POST","headers":{":authority":"e2e-shared-a-0337e8.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzvgO8EdIuChqCAu_wNK97Gz2MWR9j0u2PaW8jYdTCJA7jY4zNaxeR9fI01I\"}"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","subscription":"e2e-rate-iso-a-569586","tenant":"e2e-shared-a-0337e8","userId":"24957401-a550-4b6c-ad7c-7e98405572a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\",\"requestedSubscription\":\"e2e-rate-iso-a-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0337e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-569586"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24957401-a550-4b6c-ad7c-7e98405572a1","keyName":"e2e-rate-a-569586","selected_subscription":"e2e-rate-iso-a-569586","selected_subscription_key":"ai-tenant-e2e-shared-a-0337e8/e2e-rate-iso-a-569586@ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-0337e8/models/facebook/opt-125m","name":"rate-test-model-0337e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-569586","namespace":"ai-tenant-e2e-shared-a-0337e8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-0337e8/rate-test-model-0337e8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c00efcd1-c43d-46f8-a2a7-c52a582b8134","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43060","PortSpecifier":{"PortValue":43060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","method":"POST","path":"/ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320/v1/completions","host":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:43060","PortSpecifier":{"PortValue":43060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203797,"nanos":587714246},"http":{"id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","method":"POST","headers":{":authority":"e2e-shared-b-44b320.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MefkwfykJXefGbQo_JQQlSdhKcy7Z1uzIP7NPN16hGICFED0cGgAqumegL"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MefkwfykJXefGbQo_JQQlSdhKcy7Z1uzIP7NPN16hGICFED0cGgAqumegL\"}"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"67827b5d-0277-428d-8b5d-9d6d6d5a5ad2","keyName":"e2e-rate-b-569586","subscription":"e2e-rate-iso-b-569586","tenant":"e2e-shared-b-44b320","userId":"67827b5d-0277-428d-8b5d-9d6d6d5a5ad2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320\",\"requestedSubscription\":\"e2e-rate-iso-b-569586\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44b320.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m","name":"rate-test-model-44b320","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-569586","namespace":"ai-tenant-e2e-shared-b-44b320","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320"}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-569586"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"67827b5d-0277-428d-8b5d-9d6d6d5a5ad2","keyName":"e2e-rate-b-569586","selected_subscription":"e2e-rate-iso-b-569586","selected_subscription_key":"ai-tenant-e2e-shared-b-44b320/e2e-rate-iso-b-569586@ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-44b320/models/facebook/opt-125m","name":"rate-test-model-44b320","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-569586","namespace":"ai-tenant-e2e-shared-b-44b320","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-44b320/rate-test-model-44b320"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:56:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6fabc51-e89e-4f1b-b940-f15bd20496c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/041a32d0d94d110187fa19424953035dd3e3948db61ea454147bf01cdb4f84f8"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc95617fa02ce90b3ed3f1fa5d5246164724b01cc266b2272b0d2a0522cdede4"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8bc0c923e2b12a1e8f0760d5c28ec280a6522717fe9c0a8f396be65e66b17e7"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e951754d3e18c59d73a2b323fcec3038993d9c5a81b2efc28c5978fcceaeff"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75fc46f992689e5690e557648a6b450f3dbe0293522ac2c73d83c3c6e333a383"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae99aa94a780e4399440b51bc9857b57834f606ca11e74586c3f49e9815251d"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42aab9060d57c2f4c4eb7ad860fadf49515ef7adaffce511982531a22927d8b9"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/834b8eabe409a3ab9dbd460f1c14f011f7ef7c11a6489ab448de5606078ecffd"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/522006daba9ab247428bad3410eb5cc58dd554e8269af22514d9ddb59af34311"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d1e50d94b6394d33a5e80cdc423928c7c0b1dfd7f5149956cd604bbdc6f373c"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d9d4740252e0862262742b1c022738f9147bd6a0d5fcd3ad0dcb495ce05bfb6"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14f41afab792a76b36c9a389f0c2c504cc6c54244389c2d39ec97858d337366d"}
{"level":"info","ts":"2026-07-28T01:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f307048d7decad1ced01891917c1506873ad1b52807f1f969189bc86bdafc813"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebe15717ed70134d1fae720772bcfdb116f5e4c9cec76441121f84528a27d90b"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb9ca2946230838454900d4ce7c561f8337f2d29bc134cd40d8108fd7b7db23e"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bf154e4b0bb711b069eb83d77261fd97074f672c3243f82ab078d8ad147247f"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cc3f3e7990fdf24c87c6c4909b2efdbd5aaebcbfa5c963a2c4085dbc4dae52"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59e7b6cc2037e06f1d379be1ddd4d2efa12e79a5c753488f224c274be27d522a"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/238d22328adafcc543b5bf0ba408c3866ce4453fdd59012843e526404907165a"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e537a18f4e3e8c369e999e9017bd317a4247beaf0b411105648fae5f5fcbbcc0"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e55ff63c6a8483c2c69f3319c3fe0155374a983c8a291d69a660939a1dde751e"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60cffa91682541e589892658cc568e08e646e659e5e33c40334232c144941b2"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b2e1b86ae626ff35547070da759f0b4f7deb2be468a58268709e6db01f9b8b"}
{"level":"info","ts":"2026-07-28T01:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ac488360960a3027db75373b9cc4a7750c8de41b9cada276cecaed42c91173"}
{"level":"info","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38660","PortSpecifier":{"PortValue":38660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38660","PortSpecifier":{"PortValue":38660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203870,"nanos":828221957},"http":{"id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","method":"POST","headers":{":authority":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8cbcd54-c0be-4659-9ad1-f3b6759e2324","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38662","PortSpecifier":{"PortValue":38662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:38662","PortSpecifier":{"PortValue":38662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203870,"nanos":883645531},"http":{"id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","method":"POST","headers":{":authority":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hm63tkYcuQKhlORd_EDEdOr9SycHPj560ZviCZtGYbycl6rMPsYQOhgWx9d1"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hm63tkYcuQKhlORd_EDEdOr9SycHPj560ZviCZtGYbycl6rMPsYQOhgWx9d1\"}"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2e6601d-74bd-4923-8d5e-9f88d582e61b","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"a2e6601d-74bd-4923-8d5e-9f88d582e61b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a2e6601d-74bd-4923-8d5e-9f88d582e61b","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718271f5-4c6b-48a1-8d5c-4b9da04a6fc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"info","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"error","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T01:58:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T01:58:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7286019b-3171-4d23-a131-b49a69780388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45192","PortSpecifier":{"PortValue":45192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7286019b-3171-4d23-a131-b49a69780388","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7286019b-3171-4d23-a131-b49a69780388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:45192","PortSpecifier":{"PortValue":45192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203918,"nanos":722390164},"http":{"id":"7286019b-3171-4d23-a131-b49a69780388","method":"POST","headers":{":authority":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7286019b-3171-4d23-a131-b49a69780388","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"]}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7286019b-3171-4d23-a131-b49a69780388","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fabc768f0e4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=279bcef3-7397-45d6-92dd-1e9fdfb75e3c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ab1465ec-204a-44c3-8110-790f56e7bcc8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-8a33ed/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7286019b-3171-4d23-a131-b49a69780388","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7286019b-3171-4d23-a131-b49a69780388","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7286019b-3171-4d23-a131-b49a69780388","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:36262","PortSpecifier":{"PortValue":36262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","method":"POST","path":"/ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed/v1/chat/completions","host":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:36262","PortSpecifier":{"PortValue":36262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785203920,"nanos":782385464},"http":{"id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","method":"POST","headers":{":authority":"e2e-ipp-a-8a33ed.apps.64f49e6b-b2d8-4c70-8408-fabc768f0e4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C1rDZkmgSQhZvnmx_KiKlyN1yZIMVboXqYeUIKN4YYlUEQa5QX1AnMATowVp"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-8a33ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C1rDZkmgSQhZvnmx_KiKlyN1yZIMVboXqYeUIKN4YYlUEQa5QX1AnMATowVp\"}"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-8a33ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd51410c-a349-45b0-b82f-7f583a2197de","keyName":"e2e-ipp-8a33ed","subscription":"ipp-route-8a33ed-sub","tenant":"e2e-ipp-a-8a33ed","userId":"dd51410c-a349-45b0-b82f-7f583a2197de","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-8a33ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed\",\"requestedSubscription\":\"ipp-route-8a33ed-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-8a33ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-8a33ed/models/facebook/opt-125m","name":"ipp-route-8a33ed","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-8a33ed-sub","namespace":"ai-tenant-e2e-ipp-a-8a33ed","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed"}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-8a33ed/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-8a33ed-sub"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd51410c-a349-45b0-b82f-7f583a2197de","keyName":"e2e-ipp-8a33ed","selected_subscription":"ipp-route-8a33ed-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed-sub@ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-8a33ed/models/facebook/opt-125m","name":"ipp-route-8a33ed","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-8a33ed-sub","namespace":"ai-tenant-e2e-ipp-a-8a33ed","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-8a33ed/ipp-route-8a33ed"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T01:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d74e1e91-371e-4dcc-b852-2f1bce35aa07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/235719d715e72a6f4fb3807281d09ce1882bf98076afc46189e09708d658416d"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a82c612d3107bbcec2212e55620b98692c6e8db690281e7ba9663eebeb8b0a3"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af9332ec13564ae31451c496367b7aa2fa8388dbda1478f480461ebf2564671d"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/372863b2decc9126f39435ffcc2fcc525504533bb826b665989127d96d0c7027"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9c8d0aa975a7865b50620fe676c91b5f1eae3655f7dd8a343edd90348aa4e02"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bfa2c707e475781a99eb643164c116d1fff91969b1080f958c6840c81700b56"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4659a3fce3436befb56f3e222a333745391520a2758f6db302e32800cf488847"}
{"level":"info","ts":"2026-07-28T01:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1591efe5df48004e75f042b2a8603bd4859de413ee2c17c07ad23b859c9e710"}
{"level":"info","ts":"2026-07-28T01:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c7887e00ae21188246b21447a262c5bfd595184128544a98eac94097322418e"}
{"level":"info","ts":"2026-07-28T01:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa756a50ffddff1bb3a10ed74f65d0500af3ead1fd664ed1e8dc36c041cc1dd0"}
{"level":"info","ts":"2026-07-28T01:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dd20c565db5bb9389c2fda1133f64444c3104e7a8be99a53d84943e5f9e66f7"}
{"level":"info","ts":"2026-07-28T01:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ec86fae9e0acb4145e4549888f36436b82c6ad962b527aeb86a40e591167b82"}