--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-29T19:58:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T19:58:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"info","ts":"2026-07-29T19:58:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T19:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"info","ts":"2026-07-29T19:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T19:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T19:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"info","ts":"2026-07-29T19:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"error","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"error","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T19:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"info","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49312","PortSpecifier":{"PortValue":49312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49312","PortSpecifier":{"PortValue":49312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355167,"nanos":722755268},"http":{"id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/auth-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62252e6-1b3c-4617-a64d-c7a2899c4f6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40816","PortSpecifier":{"PortValue":40816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40816","PortSpecifier":{"PortValue":40816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355167,"nanos":760849502},"http":{"id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/auth-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"256802aa-097d-4c4c-9635-4ab48fb3c03e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49324","PortSpecifier":{"PortValue":49324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49324","PortSpecifier":{"PortValue":49324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355167,"nanos":801117516},"http":{"id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/auth-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94bf6bc3-b1f5-4b49-afca-23f21f33b342","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40830","PortSpecifier":{"PortValue":40830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40830","PortSpecifier":{"PortValue":40830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355167,"nanos":838027718},"http":{"id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/auth-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T19:59:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d62a4c98-59f2-4c5a-b3c6-b9f034fad2c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T19:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T19:59:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"info","ts":"2026-07-29T19:59:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"error","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"debug","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"info","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"debug","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"debug","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06f4648e-5681-46e3-9c82-09dd48210291","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43446","PortSpecifier":{"PortValue":43446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06f4648e-5681-46e3-9c82-09dd48210291","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06f4648e-5681-46e3-9c82-09dd48210291","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43446","PortSpecifier":{"PortValue":43446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355205,"nanos":638779277},"http":{"id":"06f4648e-5681-46e3-9c82-09dd48210291","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06f4648e-5681-46e3-9c82-09dd48210291","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06f4648e-5681-46e3-9c82-09dd48210291","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06f4648e-5681-46e3-9c82-09dd48210291","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06f4648e-5681-46e3-9c82-09dd48210291","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06f4648e-5681-46e3-9c82-09dd48210291","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06f4648e-5681-46e3-9c82-09dd48210291","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/auth-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06f4648e-5681-46e3-9c82-09dd48210291","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06f4648e-5681-46e3-9c82-09dd48210291","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06f4648e-5681-46e3-9c82-09dd48210291","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06f4648e-5681-46e3-9c82-09dd48210291","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06f4648e-5681-46e3-9c82-09dd48210291","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58870","PortSpecifier":{"PortValue":58870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58870","PortSpecifier":{"PortValue":58870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355205,"nanos":674299977},"http":{"id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/auth-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e0bc2c0-97d8-4264-be0c-1e195e165f3d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58882","PortSpecifier":{"PortValue":58882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","method":"GET","path":"/maas-api/v1/api-keys/5b064328-7585-42ce-a90a-139dac184045","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58882","PortSpecifier":{"PortValue":58882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355205,"nanos":710805797},"http":{"id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","method":"GET","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5b064328-7585-42ce-a90a-139dac184045",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5b064328-7585-42ce-a90a-139dac184045",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/auth-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9aff0abe-1d6a-4a92-a1d1-1d346f2d1bcf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43460","PortSpecifier":{"PortValue":43460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"264350b6-e1c6-4de7-9616-302c835ae5d9","method":"GET","path":"/maas-api/v1/api-keys/5b064328-7585-42ce-a90a-139dac184045","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43460","PortSpecifier":{"PortValue":43460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355205,"nanos":743610963},"http":{"id":"264350b6-e1c6-4de7-9616-302c835ae5d9","method":"GET","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5b064328-7585-42ce-a90a-139dac184045",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5b064328-7585-42ce-a90a-139dac184045",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/auth-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"264350b6-e1c6-4de7-9616-302c835ae5d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"debug","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"info","ts":"2026-07-29T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"debug","ts":"2026-07-29T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:00:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:00:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58492","PortSpecifier":{"PortValue":58492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58492","PortSpecifier":{"PortValue":58492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355248,"nanos":670928011},"http":{"id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/auth-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6073dad3-f122-47ef-a5b5-0e5edfaa96e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45598","PortSpecifier":{"PortValue":45598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5e779e5-a282-4b30-80a9-000624f5eb98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45598","PortSpecifier":{"PortValue":45598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355248,"nanos":707993354},"http":{"id":"d5e779e5-a282-4b30-80a9-000624f5eb98","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/auth-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e779e5-a282-4b30-80a9-000624f5eb98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58500","PortSpecifier":{"PortValue":58500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58500","PortSpecifier":{"PortValue":58500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355248,"nanos":748114732},"http":{"id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dXLCMb0LdURWz0Br_cnAS3acZHXMNgE5d2mNL1JZpg3I0R0xKjryIbpc6xAe"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dXLCMb0LdURWz0Br_cnAS3acZHXMNgE5d2mNL1JZpg3I0R0xKjryIbpc6xAe\"}"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"883a5224-b582-43ff-8270-4fab320de0a5","keyName":"e2e-auth-iso-a-4058b4","subscription":"e2e-auth-iso-18befd","tenant":"e2e-shared-a-9a3702","userId":"883a5224-b582-43ff-8270-4fab320de0a5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/auth-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-18befd"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6746e725-1e5e-49ec-bb3b-97fd5aa30851","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f371ee6cd83b1fd3c7cdb1b2f9d0d56bb0842012846bdb88fbe7d66cba8210d9"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf30f71cdbd2be472f928e0f888b36a003bc22a39c86d67697be99a3ec75e94a"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adc4f584eac16b3c4d4e6b7edf2299265da38d008274654139b926f716d16141"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec162850c1025d19eb5e527dedf2a1e084ccbac7d559a4c0dda504ec5b63ed4b"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0c97ab4dae6e3316d9d19102b76f4cdee07bea06855f2cb0057bfca538a81a5"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e143d37f08725a56958b77a8f0441c57b53155d55dffb9dc5d10d410876b2c04"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e589787105fa566fe9b231661241e2917152acab77440e28eecf466aca6c3e3"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f19e13dd6d3480dfa867a2540519e8daef29ce29116e3b44e9c8c1e02e5dfef2"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e9a1f365ed465dbdba48eb26d8be61061160535be9dc7476e7fb1ccc73f831f"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d308076207d90aa6cbf44044f5ecdfa3ab2cba4c0ee8b49c54ea9dcf574dc5fe"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/353403e98f6aab09925845e95ac0f2e6d5dd0a1e984f5dcbd532a31bcab443c6"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c477bae2d27b539d235dcf70b5ce829e8f8afbcc2b8f9fdb587c19f17575e531"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07290deba148de06e12aa43e8455c1ac4dfd3322fe949789cd9d4a5c658240e2"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf19de9e73a70922f2c228ee8d61bd1a457f9962ca1613172aba5717cc2546ce"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f67803361ef8d70a4880589d3a94ed9bf708fc51075553fcf97767c1560ca848"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T20:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44a155026208d30308801b8ab161fb26dc03971c49f1a01e3e693eacc149034d"}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0"}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0"}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"info","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"}
{"level":"info","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad"}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64"}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e864d502c9a3f8de0dde663c0da55ede17c6c75269a9ac47c47e4c32567079","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e864d502c9a3f8de0dde663c0da55ede17c6c75269a9ac47c47e4c32567079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e864d502c9a3f8de0dde663c0da55ede17c6c75269a9ac47c47e4c32567079"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6112c9015bca51d413c38d3f8d440331dbd26700466840fde0d1505a2582c4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6112c9015bca51d413c38d3f8d440331dbd26700466840fde0d1505a2582c4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e864d502c9a3f8de0dde663c0da55ede17c6c75269a9ac47c47e4c32567079","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e864d502c9a3f8de0dde663c0da55ede17c6c75269a9ac47c47e4c32567079"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e864d502c9a3f8de0dde663c0da55ede17c6c75269a9ac47c47e4c32567079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6112c9015bca51d413c38d3f8d440331dbd26700466840fde0d1505a2582c4ab"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0a541805bc75838091f9a3fa27e6edc7cee642aa21148d16a018e05e47436da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0a541805bc75838091f9a3fa27e6edc7cee642aa21148d16a018e05e47436da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6112c9015bca51d413c38d3f8d440331dbd26700466840fde0d1505a2582c4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6112c9015bca51d413c38d3f8d440331dbd26700466840fde0d1505a2582c4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e864d502c9a3f8de0dde663c0da55ede17c6c75269a9ac47c47e4c32567079"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0a541805bc75838091f9a3fa27e6edc7cee642aa21148d16a018e05e47436da"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6112c9015bca51d413c38d3f8d440331dbd26700466840fde0d1505a2582c4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e864d502c9a3f8de0dde663c0da55ede17c6c75269a9ac47c47e4c32567079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f72fa7fc7b0bcf75ffd0a3324671d7930bd25ac6de1cffb19af901b4d60dd5"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71f72fa7fc7b0bcf75ffd0a3324671d7930bd25ac6de1cffb19af901b4d60dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71f72fa7fc7b0bcf75ffd0a3324671d7930bd25ac6de1cffb19af901b4d60dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69395a5e636f062b725abe258ff81cff01047033d0d38f2a40da8162dcbf9a5a"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298b22d14815f2effe89911bedd723d6ba2c3d6ae52e1fb9d99b52a71623c9b4"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71f72fa7fc7b0bcf75ffd0a3324671d7930bd25ac6de1cffb19af901b4d60dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69395a5e636f062b725abe258ff81cff01047033d0d38f2a40da8162dcbf9a5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69395a5e636f062b725abe258ff81cff01047033d0d38f2a40da8162dcbf9a5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6112c9015bca51d413c38d3f8d440331dbd26700466840fde0d1505a2582c4ab"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771c740ec5d70a22180a61b8623f70cfa36a2f368db31c49d4098bca2ed6101d"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69395a5e636f062b725abe258ff81cff01047033d0d38f2a40da8162dcbf9a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0a541805bc75838091f9a3fa27e6edc7cee642aa21148d16a018e05e47436da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0a541805bc75838091f9a3fa27e6edc7cee642aa21148d16a018e05e47436da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0a541805bc75838091f9a3fa27e6edc7cee642aa21148d16a018e05e47436da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298b22d14815f2effe89911bedd723d6ba2c3d6ae52e1fb9d99b52a71623c9b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298b22d14815f2effe89911bedd723d6ba2c3d6ae52e1fb9d99b52a71623c9b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71f72fa7fc7b0bcf75ffd0a3324671d7930bd25ac6de1cffb19af901b4d60dd5"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69395a5e636f062b725abe258ff81cff01047033d0d38f2a40da8162dcbf9a5a"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298b22d14815f2effe89911bedd723d6ba2c3d6ae52e1fb9d99b52a71623c9b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0a541805bc75838091f9a3fa27e6edc7cee642aa21148d16a018e05e47436da"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298b22d14815f2effe89911bedd723d6ba2c3d6ae52e1fb9d99b52a71623c9b4"}
{"level":"info","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6112c9015bca51d413c38d3f8d440331dbd26700466840fde0d1505a2582c4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771c740ec5d70a22180a61b8623f70cfa36a2f368db31c49d4098bca2ed6101d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["771c740ec5d70a22180a61b8623f70cfa36a2f368db31c49d4098bca2ed6101d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771c740ec5d70a22180a61b8623f70cfa36a2f368db31c49d4098bca2ed6101d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:01:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:01:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771c740ec5d70a22180a61b8623f70cfa36a2f368db31c49d4098bca2ed6101d"}
{"level":"info","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71f72fa7fc7b0bcf75ffd0a3324671d7930bd25ac6de1cffb19af901b4d60dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69395a5e636f062b725abe258ff81cff01047033d0d38f2a40da8162dcbf9a5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0a541805bc75838091f9a3fa27e6edc7cee642aa21148d16a018e05e47436da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298b22d14815f2effe89911bedd723d6ba2c3d6ae52e1fb9d99b52a71623c9b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771c740ec5d70a22180a61b8623f70cfa36a2f368db31c49d4098bca2ed6101d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"}
{"level":"info","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56316","PortSpecifier":{"PortValue":56316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b8fa386-b564-4b88-82e3-55a5080af25b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56316","PortSpecifier":{"PortValue":56316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355333,"nanos":325466063},"http":{"id":"2b8fa386-b564-4b88-82e3-55a5080af25b","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/sub-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b8fa386-b564-4b88-82e3-55a5080af25b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60910","PortSpecifier":{"PortValue":60910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60910","PortSpecifier":{"PortValue":60910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355333,"nanos":365937368},"http":{"id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/sub-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a905f5b-2093-4992-b3d6-42dbd01c6d69","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56326","PortSpecifier":{"PortValue":56326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56326","PortSpecifier":{"PortValue":56326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355333,"nanos":404824907},"http":{"id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","method":"GET","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rfqX8jl4RqctHRSo_H04PBHvez0mYXEeKbCH083dDCmWqxYuVW0jhAPFnIah"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rfqX8jl4RqctHRSo_H04PBHvez0mYXEeKbCH083dDCmWqxYuVW0jhAPFnIah\"}"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ade3e50e-9900-40c1-aa02-75628b6b4812","keyName":"e2e-sub-iso-677627","subscription":"e2e-a-only-6521eb","tenant":"e2e-shared-a-9a3702","userId":"ade3e50e-9900-40c1-aa02-75628b6b4812","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/sub-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-6521eb"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1184cf49-5f00-4597-b8fd-4fb416d43c5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60912","PortSpecifier":{"PortValue":60912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60912","PortSpecifier":{"PortValue":60912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355333,"nanos":447617583},"http":{"id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","method":"GET","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HvSocm7p21AKaZm6_QLnT0jsU4dOrWMK4bxV2vx9gzp62zhtRRw6VNgo3oHy"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ef216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HvSocm7p21AKaZm6_QLnT0jsU4dOrWMK4bxV2vx9gzp62zhtRRw6VNgo3oHy\"}"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ef216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"09878575-3852-4fad-9f34-c1ba65932f1d","keyName":"e2e-sub-iso-531b91","subscription":"e2e-b-only-6521eb","tenant":"e2e-shared-b-8ef216","userId":"09878575-3852-4fad-9f34-c1ba65932f1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/sub-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-6521eb"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce012221-4ecc-4581-9b0f-afbad5ab34dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48370","PortSpecifier":{"PortValue":48370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bac7267-3117-4e59-9625-4378c67f3c17","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48370","PortSpecifier":{"PortValue":48370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355358,"nanos":133873955},"http":{"id":"8bac7267-3117-4e59-9625-4378c67f3c17","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/sub-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bac7267-3117-4e59-9625-4378c67f3c17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a165f602-6793-44b4-91c7-787ffa337612","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45156","PortSpecifier":{"PortValue":45156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a165f602-6793-44b4-91c7-787ffa337612","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a165f602-6793-44b4-91c7-787ffa337612","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45156","PortSpecifier":{"PortValue":45156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355358,"nanos":177606860},"http":{"id":"a165f602-6793-44b4-91c7-787ffa337612","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a165f602-6793-44b4-91c7-787ffa337612","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a165f602-6793-44b4-91c7-787ffa337612","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a165f602-6793-44b4-91c7-787ffa337612","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a165f602-6793-44b4-91c7-787ffa337612","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a165f602-6793-44b4-91c7-787ffa337612","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a165f602-6793-44b4-91c7-787ffa337612","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/sub-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a165f602-6793-44b4-91c7-787ffa337612","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a165f602-6793-44b4-91c7-787ffa337612","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a165f602-6793-44b4-91c7-787ffa337612","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a165f602-6793-44b4-91c7-787ffa337612","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a165f602-6793-44b4-91c7-787ffa337612","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48378","PortSpecifier":{"PortValue":48378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48378","PortSpecifier":{"PortValue":48378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355358,"nanos":218432574},"http":{"id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YYWX8vcM7bRroon5_6i1WmeNJCaA8wMFQfI4dgrDUHKICgikUeAeBkX0YLZ3"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YYWX8vcM7bRroon5_6i1WmeNJCaA8wMFQfI4dgrDUHKICgikUeAeBkX0YLZ3\"}"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30221002-f507-40db-8ac4-abdae6d6d2fd","keyName":"e2e-sub-iso-5710b3","subscription":"e2e-shared-sub-8ea16e","tenant":"e2e-shared-a-9a3702","userId":"30221002-f507-40db-8ac4-abdae6d6d2fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/sub-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8ea16e"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb4c59ee-d7e5-400e-a296-e20968f45fd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45162","PortSpecifier":{"PortValue":45162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e750e5a-1512-4a04-b774-b1a2065ece05","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45162","PortSpecifier":{"PortValue":45162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355358,"nanos":249678198},"http":{"id":"4e750e5a-1512-4a04-b774-b1a2065ece05","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Br7U1u8wFl2D3r0f_FSIE3fXLCEfKh69e7gtfTvJ1N9TLKgLThwnXWgTXxDy"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ef216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Br7U1u8wFl2D3r0f_FSIE3fXLCEfKh69e7gtfTvJ1N9TLKgLThwnXWgTXxDy\"}"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ef216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3d8170f-4167-4b5e-b638-5ed1dfb281c8","keyName":"e2e-sub-iso-c2af4c","subscription":"e2e-shared-sub-8ea16e","tenant":"e2e-shared-b-8ef216","userId":"f3d8170f-4167-4b5e-b638-5ed1dfb281c8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/sub-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8ea16e"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:02:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e750e5a-1512-4a04-b774-b1a2065ece05","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6112c9015bca51d413c38d3f8d440331dbd26700466840fde0d1505a2582c4ab"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a00eb40afc3ce312c60d776c60f4e11e1e068eef3504e1379dbaea37eb734347"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c3f5bd43752cc349a2f72e6a7f9ad364b1609b274adce1153d1dc3d546fad6e"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71f72fa7fc7b0bcf75ffd0a3324671d7930bd25ac6de1cffb19af901b4d60dd5"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37e041c65d0918cbe07fde086a7a6c2ff229e8da235df470e7d57ee4e6b577c0"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/771c740ec5d70a22180a61b8623f70cfa36a2f368db31c49d4098bca2ed6101d"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/298b22d14815f2effe89911bedd723d6ba2c3d6ae52e1fb9d99b52a71623c9b4"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0a541805bc75838091f9a3fa27e6edc7cee642aa21148d16a018e05e47436da"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4307b9e7adb8c15d81cd87708d8feb242ede058ed24427e9a7eafeef3f648e9b"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69395a5e636f062b725abe258ff81cff01047033d0d38f2a40da8162dcbf9a5a"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7d61570aa4021c06969b09f7c294be2f9f789a0afa01d6d412ae024b511b74a"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e864d502c9a3f8de0dde663c0da55ede17c6c75269a9ac47c47e4c32567079"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/297d975e2dad4e6247427f5788721f5016c20159564d41eacd5d4e002c22ab82"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d6e5e33b78d970e06349088b1c6ef439abff5b1caa04be9781e81de432b32bc"}
{"level":"info","ts":"2026-07-29T20:02:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"}
{"level":"info","ts":"2026-07-29T20:02:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"}
{"level":"info","ts":"2026-07-29T20:02:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a67aa3e777fdfd4e5ce02e110ae1ef2b6fcc739abfabf57215b9457411bd8f64"}
{"level":"info","ts":"2026-07-29T20:02:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a2e5b1f680e3137122ec780ec5cb801ce7156e60a7cc3a767609018c70c91ad"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1"}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610"}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"}
{"level":"info","ts":"2026-07-29T20:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239"}
{"level":"info","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174befe4a8d50364c9f1f258abec691e780f6d24511fbcab82e1920d46792ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174befe4a8d50364c9f1f258abec691e780f6d24511fbcab82e1920d46792ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174befe4a8d50364c9f1f258abec691e780f6d24511fbcab82e1920d46792ee1"}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174befe4a8d50364c9f1f258abec691e780f6d24511fbcab82e1920d46792ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174befe4a8d50364c9f1f258abec691e780f6d24511fbcab82e1920d46792ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174befe4a8d50364c9f1f258abec691e780f6d24511fbcab82e1920d46792ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174befe4a8d50364c9f1f258abec691e780f6d24511fbcab82e1920d46792ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174befe4a8d50364c9f1f258abec691e780f6d24511fbcab82e1920d46792ee1"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6"}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748089e06d4635caca61cbaf48b97ace8989df9c2e189190cf3c6c663fcbdf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748089e06d4635caca61cbaf48b97ace8989df9c2e189190cf3c6c663fcbdf3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748089e06d4635caca61cbaf48b97ace8989df9c2e189190cf3c6c663fcbdf3d"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748089e06d4635caca61cbaf48b97ace8989df9c2e189190cf3c6c663fcbdf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["748089e06d4635caca61cbaf48b97ace8989df9c2e189190cf3c6c663fcbdf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748089e06d4635caca61cbaf48b97ace8989df9c2e189190cf3c6c663fcbdf3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c701daf32b57be11697364856f141a17c4e709254e3a10c12ab25c6de62b285"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748089e06d4635caca61cbaf48b97ace8989df9c2e189190cf3c6c663fcbdf3d"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c701daf32b57be11697364856f141a17c4e709254e3a10c12ab25c6de62b285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c701daf32b57be11697364856f141a17c4e709254e3a10c12ab25c6de62b285"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c701daf32b57be11697364856f141a17c4e709254e3a10c12ab25c6de62b285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748089e06d4635caca61cbaf48b97ace8989df9c2e189190cf3c6c663fcbdf3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f372b952e10e8446b2773ebcd5444a1515b62f54d5fed850371e0d5ea7c4cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f372b952e10e8446b2773ebcd5444a1515b62f54d5fed850371e0d5ea7c4cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baff0ac51e5917d2824eccd83a7f45c1ff07d713ec01d144ea04e027b5e05875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f372b952e10e8446b2773ebcd5444a1515b62f54d5fed850371e0d5ea7c4cc"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baff0ac51e5917d2824eccd83a7f45c1ff07d713ec01d144ea04e027b5e05875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c701daf32b57be11697364856f141a17c4e709254e3a10c12ab25c6de62b285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baff0ac51e5917d2824eccd83a7f45c1ff07d713ec01d144ea04e027b5e05875"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f372b952e10e8446b2773ebcd5444a1515b62f54d5fed850371e0d5ea7c4cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f372b952e10e8446b2773ebcd5444a1515b62f54d5fed850371e0d5ea7c4cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f372b952e10e8446b2773ebcd5444a1515b62f54d5fed850371e0d5ea7c4cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baff0ac51e5917d2824eccd83a7f45c1ff07d713ec01d144ea04e027b5e05875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baff0ac51e5917d2824eccd83a7f45c1ff07d713ec01d144ea04e027b5e05875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c701daf32b57be11697364856f141a17c4e709254e3a10c12ab25c6de62b285"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baff0ac51e5917d2824eccd83a7f45c1ff07d713ec01d144ea04e027b5e05875","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f372b952e10e8446b2773ebcd5444a1515b62f54d5fed850371e0d5ea7c4cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baff0ac51e5917d2824eccd83a7f45c1ff07d713ec01d144ea04e027b5e05875","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:04:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"}
{"level":"error","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f372b952e10e8446b2773ebcd5444a1515b62f54d5fed850371e0d5ea7c4cc"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baff0ac51e5917d2824eccd83a7f45c1ff07d713ec01d144ea04e027b5e05875"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750"}
{"level":"info","ts":"2026-07-29T20:04:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"}
{"level":"info","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45920","PortSpecifier":{"PortValue":45920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45920","PortSpecifier":{"PortValue":45920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355465,"nanos":286419161},"http":{"id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33bd53de-2590-40d6-9b31-a9ef5610c92e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47472","PortSpecifier":{"PortValue":47472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47472","PortSpecifier":{"PortValue":47472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355465,"nanos":326406241},"http":{"id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/rate-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1a168a-7c80-4fe1-a6e8-7c43e6dcafd3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e140303-d11f-4644-9188-2fd196647087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45932","PortSpecifier":{"PortValue":45932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e140303-d11f-4644-9188-2fd196647087","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e140303-d11f-4644-9188-2fd196647087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45932","PortSpecifier":{"PortValue":45932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355465,"nanos":362757968},"http":{"id":"5e140303-d11f-4644-9188-2fd196647087","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1I2EZYjcpdcGxljce_RLfpMRPsjUZkTbVvYl8c43iwFwREH3n2hpL208xG5ut"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e140303-d11f-4644-9188-2fd196647087","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1I2EZYjcpdcGxljce_RLfpMRPsjUZkTbVvYl8c43iwFwREH3n2hpL208xG5ut\"}"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"215188be-b596-46a9-8477-db45cbee231d","keyName":"e2e-rate-a-81744a","subscription":"e2e-rate-iso-a-81744a","tenant":"e2e-shared-a-9a3702","userId":"215188be-b596-46a9-8477-db45cbee231d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e140303-d11f-4644-9188-2fd196647087","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-81744a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81744a","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e140303-d11f-4644-9188-2fd196647087","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81744a"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e140303-d11f-4644-9188-2fd196647087","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"215188be-b596-46a9-8477-db45cbee231d","keyName":"e2e-rate-a-81744a","selected_subscription":"e2e-rate-iso-a-81744a","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-81744a@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81744a","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e140303-d11f-4644-9188-2fd196647087","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e140303-d11f-4644-9188-2fd196647087","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45940","PortSpecifier":{"PortValue":45940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45940","PortSpecifier":{"PortValue":45940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355466,"nanos":453970513},"http":{"id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1I2EZYjcpdcGxljce_RLfpMRPsjUZkTbVvYl8c43iwFwREH3n2hpL208xG5ut"}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1I2EZYjcpdcGxljce_RLfpMRPsjUZkTbVvYl8c43iwFwREH3n2hpL208xG5ut\"}"}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"215188be-b596-46a9-8477-db45cbee231d","keyName":"e2e-rate-a-81744a","subscription":"e2e-rate-iso-a-81744a","tenant":"e2e-shared-a-9a3702","userId":"215188be-b596-46a9-8477-db45cbee231d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-81744a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81744a","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81744a"}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"215188be-b596-46a9-8477-db45cbee231d","keyName":"e2e-rate-a-81744a","selected_subscription":"e2e-rate-iso-a-81744a","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-81744a@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81744a","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2098d816-5eb2-45ed-b866-c4d66f7da7b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45948","PortSpecifier":{"PortValue":45948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b3729d5-18c0-45c2-9486-60503f4ed417","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45948","PortSpecifier":{"PortValue":45948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355467,"nanos":490288513},"http":{"id":"2b3729d5-18c0-45c2-9486-60503f4ed417","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1I2EZYjcpdcGxljce_RLfpMRPsjUZkTbVvYl8c43iwFwREH3n2hpL208xG5ut"}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1I2EZYjcpdcGxljce_RLfpMRPsjUZkTbVvYl8c43iwFwREH3n2hpL208xG5ut\"}"}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"215188be-b596-46a9-8477-db45cbee231d","keyName":"e2e-rate-a-81744a","subscription":"e2e-rate-iso-a-81744a","tenant":"e2e-shared-a-9a3702","userId":"215188be-b596-46a9-8477-db45cbee231d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-81744a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81744a","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81744a"}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"215188be-b596-46a9-8477-db45cbee231d","keyName":"e2e-rate-a-81744a","selected_subscription":"e2e-rate-iso-a-81744a","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-81744a@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81744a","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b3729d5-18c0-45c2-9486-60503f4ed417","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35462","PortSpecifier":{"PortValue":35462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35462","PortSpecifier":{"PortValue":35462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355486,"nanos":665026178},"http":{"id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71b1c96c-2f0a-4be5-966f-de7dfcdfd861","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35fed829-c950-44ff-80a9-96b32704ad89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45084","PortSpecifier":{"PortValue":45084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35fed829-c950-44ff-80a9-96b32704ad89","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35fed829-c950-44ff-80a9-96b32704ad89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45084","PortSpecifier":{"PortValue":45084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355486,"nanos":701222550},"http":{"id":"35fed829-c950-44ff-80a9-96b32704ad89","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35fed829-c950-44ff-80a9-96b32704ad89","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35fed829-c950-44ff-80a9-96b32704ad89","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35fed829-c950-44ff-80a9-96b32704ad89","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35fed829-c950-44ff-80a9-96b32704ad89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35fed829-c950-44ff-80a9-96b32704ad89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35fed829-c950-44ff-80a9-96b32704ad89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/rate-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35fed829-c950-44ff-80a9-96b32704ad89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35fed829-c950-44ff-80a9-96b32704ad89","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35fed829-c950-44ff-80a9-96b32704ad89","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35fed829-c950-44ff-80a9-96b32704ad89","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35fed829-c950-44ff-80a9-96b32704ad89","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80e461a5-36aa-419d-83da-ec5f325af12d","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355486,"nanos":731728793},"http":{"id":"80e461a5-36aa-419d-83da-ec5f325af12d","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P\"}"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","subscription":"e2e-rate-iso-a-7c4bce","tenant":"e2e-shared-a-9a3702","userId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","selected_subscription":"e2e-rate-iso-a-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-7c4bce@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80e461a5-36aa-419d-83da-ec5f325af12d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35490","PortSpecifier":{"PortValue":35490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64b82da1-29d1-4bbf-98f4-251cdef95184","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35490","PortSpecifier":{"PortValue":35490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355487,"nanos":779169084},"http":{"id":"64b82da1-29d1-4bbf-98f4-251cdef95184","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P"}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P\"}"}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","subscription":"e2e-rate-iso-a-7c4bce","tenant":"e2e-shared-a-9a3702","userId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","selected_subscription":"e2e-rate-iso-a-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-7c4bce@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64b82da1-29d1-4bbf-98f4-251cdef95184","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de060d5-4337-495a-9570-535290847fc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52848","PortSpecifier":{"PortValue":52848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6de060d5-4337-495a-9570-535290847fc0","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de060d5-4337-495a-9570-535290847fc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52848","PortSpecifier":{"PortValue":52848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355488,"nanos":816445751},"http":{"id":"6de060d5-4337-495a-9570-535290847fc0","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P"}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6de060d5-4337-495a-9570-535290847fc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P\"}"}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","subscription":"e2e-rate-iso-a-7c4bce","tenant":"e2e-shared-a-9a3702","userId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6de060d5-4337-495a-9570-535290847fc0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6de060d5-4337-495a-9570-535290847fc0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de060d5-4337-495a-9570-535290847fc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","selected_subscription":"e2e-rate-iso-a-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-7c4bce@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de060d5-4337-495a-9570-535290847fc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de060d5-4337-495a-9570-535290847fc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52860","PortSpecifier":{"PortValue":52860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c477944-d10e-49be-b9d2-ef94e44015ab","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52860","PortSpecifier":{"PortValue":52860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355489,"nanos":852533965},"http":{"id":"0c477944-d10e-49be-b9d2-ef94e44015ab","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P"}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P\"}"}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","subscription":"e2e-rate-iso-a-7c4bce","tenant":"e2e-shared-a-9a3702","userId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","selected_subscription":"e2e-rate-iso-a-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-7c4bce@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c477944-d10e-49be-b9d2-ef94e44015ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52868","PortSpecifier":{"PortValue":52868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52868","PortSpecifier":{"PortValue":52868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355490,"nanos":893354124},"http":{"id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P"}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P\"}"}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","subscription":"e2e-rate-iso-a-7c4bce","tenant":"e2e-shared-a-9a3702","userId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","selected_subscription":"e2e-rate-iso-a-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-7c4bce@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7594d6f8-e427-4eb9-91bd-ed2a21c2b933","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88f92470-979e-4063-af3c-bf704222f82a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52876","PortSpecifier":{"PortValue":52876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88f92470-979e-4063-af3c-bf704222f82a","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88f92470-979e-4063-af3c-bf704222f82a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52876","PortSpecifier":{"PortValue":52876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355491,"nanos":934815707},"http":{"id":"88f92470-979e-4063-af3c-bf704222f82a","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P"}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P\"}"}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","subscription":"e2e-rate-iso-a-7c4bce","tenant":"e2e-shared-a-9a3702","userId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88f92470-979e-4063-af3c-bf704222f82a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f92470-979e-4063-af3c-bf704222f82a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","selected_subscription":"e2e-rate-iso-a-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-7c4bce@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88f92470-979e-4063-af3c-bf704222f82a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88f92470-979e-4063-af3c-bf704222f82a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52880","PortSpecifier":{"PortValue":52880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57a19c20-91de-42d4-9723-92660ec86aaa","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52880","PortSpecifier":{"PortValue":52880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355492,"nanos":980755087},"http":{"id":"57a19c20-91de-42d4-9723-92660ec86aaa","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P"}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P\"}"}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","subscription":"e2e-rate-iso-a-7c4bce","tenant":"e2e-shared-a-9a3702","userId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","selected_subscription":"e2e-rate-iso-a-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-7c4bce@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57a19c20-91de-42d4-9723-92660ec86aaa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52882","PortSpecifier":{"PortValue":52882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52882","PortSpecifier":{"PortValue":52882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355494,"nanos":20691474},"http":{"id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P"}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P\"}"}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","subscription":"e2e-rate-iso-a-7c4bce","tenant":"e2e-shared-a-9a3702","userId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","selected_subscription":"e2e-rate-iso-a-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-7c4bce@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf85f4f9-feeb-4a26-a403-d62013f0a9d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52888","PortSpecifier":{"PortValue":52888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","method":"POST","path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions","host":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52888","PortSpecifier":{"PortValue":52888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355495,"nanos":62573316},"http":{"id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","method":"POST","headers":{":authority":"e2e-shared-a-9a3702.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNQamHfaMu2RIx9u_23g7tgddNF9SZHcQqbVkUpO6ieWw8hDVbwjy1Iasd1P\"}"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","subscription":"e2e-rate-iso-a-7c4bce","tenant":"e2e-shared-a-9a3702","userId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\",\"requestedSubscription\":\"e2e-rate-iso-a-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9a3702.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7df941e7-6345-4c57-8d84-16eab9ccd7b1","keyName":"e2e-rate-a-7c4bce","selected_subscription":"e2e-rate-iso-a-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-a-9a3702/e2e-rate-iso-a-7c4bce@ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-9a3702/models/facebook/opt-125m","name":"rate-test-model-9a3702","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c4bce","namespace":"ai-tenant-e2e-shared-a-9a3702","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9a3702/rate-test-model-9a3702"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53c0b6c3-50a9-43c9-a910-f73d7a5c63f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59624","PortSpecifier":{"PortValue":59624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ef38b77-e140-4911-b1cc-f967e90f3001","method":"POST","path":"/ai-tenant-e2e-shared-b-8ef216/rate-test-model-8ef216/v1/completions","host":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59624","PortSpecifier":{"PortValue":59624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355495,"nanos":100242018},"http":{"id":"2ef38b77-e140-4911-b1cc-f967e90f3001","method":"POST","headers":{":authority":"e2e-shared-b-8ef216.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-8ef216/rate-test-model-8ef216/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-c9kBPjTAHHC0PYfb_Df98hXZ2QbeOqZocnKJjBoCz474xjHCgAGVe7fOHq4I"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ef216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-c9kBPjTAHHC0PYfb_Df98hXZ2QbeOqZocnKJjBoCz474xjHCgAGVe7fOHq4I\"}"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ef216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba075f83-5a67-42da-969a-d70bec89d32d","keyName":"e2e-rate-b-7c4bce","subscription":"e2e-rate-iso-b-7c4bce","tenant":"e2e-shared-b-8ef216","userId":"ba075f83-5a67-42da-969a-d70bec89d32d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-8ef216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-8ef216/rate-test-model-8ef216\",\"requestedSubscription\":\"e2e-rate-iso-b-7c4bce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ef216.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m","name":"rate-test-model-8ef216","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7c4bce","namespace":"ai-tenant-e2e-shared-b-8ef216","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8ef216/rate-test-model-8ef216"}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ef216/rate-test-model-8ef216\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7c4bce"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba075f83-5a67-42da-969a-d70bec89d32d","keyName":"e2e-rate-b-7c4bce","selected_subscription":"e2e-rate-iso-b-7c4bce","selected_subscription_key":"ai-tenant-e2e-shared-b-8ef216/e2e-rate-iso-b-7c4bce@ai-tenant-e2e-shared-b-8ef216/rate-test-model-8ef216","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-8ef216/models/facebook/opt-125m","name":"rate-test-model-8ef216","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7c4bce","namespace":"ai-tenant-e2e-shared-b-8ef216","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8ef216/rate-test-model-8ef216"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ef38b77-e140-4911-b1cc-f967e90f3001","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0852bf71b961ddccd9757dc7124a1ef0a863a61c883f9f516275ea94830cb11"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27e54a20dba46b964ef7ab7fc2a556339c678043ea90860824a63fb09c0d9239"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c230ffc3fd51afb41a1d0079f5a396f9ebfc5155a436a4c2e59b6f08851e37bb"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45dc439972c4c8c8811eb2433f3413caf897b0ec729fe671d63f1e2eda259c2"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baff0ac51e5917d2824eccd83a7f45c1ff07d713ec01d144ea04e027b5e05875"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1364fe597b630d2b2cf094e6d04d826a03845d4c35f356d51e1ead1d7076cdf6"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e10d2333978869d40d51d4f96d9bb7a64168c5687b5d333a128ace8474faa1f1"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e94c29e72d47838f2f39a436dd401d234680ff33dc1cf2d804d1ce48c157684"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98121c1ba62f474a3e64b03ffd70276bc20e096570b75c1f97898470e36acefb"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c701daf32b57be11697364856f141a17c4e709254e3a10c12ab25c6de62b285"}
{"level":"info","ts":"2026-07-29T20:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7db16b894898900d340429353d80b872664cf2bbd93ec5a8711434d13fb871e9"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cbfdfdd6a8219c15e8591790734bfb55793da03bf66b3194cb0824236fa39d"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8f372b952e10e8446b2773ebcd5444a1515b62f54d5fed850371e0d5ea7c4cc"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df55b123073f45c4d5184e0c8d9b511cefcbdd7699fce526b8feb4c5fec55610"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9cb19ac0051f9c760026e235abb2ad601eb51eff4bfdf4b0021f2e16406c9cc"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29b2042399d6587ef9e50d0a962f80eceb2bf06d9cbde537c8169e5e75f17643"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/174befe4a8d50364c9f1f258abec691e780f6d24511fbcab82e1920d46792ee1"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4b93651903390184576d97461fcbe0f1f619d38bf02ab424ad7531effa0bbf4"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85e033ac7afa76799ba5c57b888c8d0031908229dbce2df984e6ca66f1f35750"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee14cb4a7f5ac10e6813fa65cec5212232a9a480c6574c1a5445680f59716395"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9bda76d4af0b0d6e079dcf27965e50d504c0b0f69ff5281c61580bca3d4839"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624490f39feb7cfe96437aea618fd76a0d08089cf070b6f616dcf4f63403f503"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/748089e06d4635caca61cbaf48b97ace8989df9c2e189190cf3c6c663fcbdf3d"}
{"level":"info","ts":"2026-07-29T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bce00d1e2e15c92dd25efefa759bea1c190ed29410f82eada3facaf38aaec833"}
{"level":"info","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34096","PortSpecifier":{"PortValue":34096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34096","PortSpecifier":{"PortValue":34096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355569,"nanos":268573332},"http":{"id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","method":"POST","headers":{":authority":"maas.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd24d465-cda1-4528-bf0d-66bd2c4ea652","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34108","PortSpecifier":{"PortValue":34108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34108","PortSpecifier":{"PortValue":34108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355569,"nanos":321381644},"http":{"id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","method":"POST","headers":{":authority":"maas.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fQMgrH3oPuCTt5gc_UdJrSyShPisQ91jd5ocVSPaI0h7VryrhCbFfs37AMIf"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fQMgrH3oPuCTt5gc_UdJrSyShPisQ91jd5ocVSPaI0h7VryrhCbFfs37AMIf\"}"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d06e591-0f5f-4ec9-bc2a-bf44fe83d9cd","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"6d06e591-0f5f-4ec9-bc2a-bf44fe83d9cd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d06e591-0f5f-4ec9-bc2a-bf44fe83d9cd","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:06:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ce0c8d0-e7f1-4955-bb60-90159aee5ecd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca"}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca"}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e"}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e"}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3"}
{"level":"error","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90"}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3"}
{"level":"info","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90"}
{"level":"debug","ts":"2026-07-29T20:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0"}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0"}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a"}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0"}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a"}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b"}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b"}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3c8c40ec265d8384cc9f7a134a91c4da3be846624f5322d04f781d15c3416d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3c8c40ec265d8384cc9f7a134a91c4da3be846624f5322d04f781d15c3416d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3c8c40ec265d8384cc9f7a134a91c4da3be846624f5322d04f781d15c3416d3"}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3c8c40ec265d8384cc9f7a134a91c4da3be846624f5322d04f781d15c3416d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3c8c40ec265d8384cc9f7a134a91c4da3be846624f5322d04f781d15c3416d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3c8c40ec265d8384cc9f7a134a91c4da3be846624f5322d04f781d15c3416d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b"}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3c8c40ec265d8384cc9f7a134a91c4da3be846624f5322d04f781d15c3416d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6"}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3c8c40ec265d8384cc9f7a134a91c4da3be846624f5322d04f781d15c3416d3"}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a"}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T20:06:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6"}
{"level":"info","ts":"2026-07-29T20:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a"}
{"level":"info","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43204","PortSpecifier":{"PortValue":43204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-d722d0.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43204","PortSpecifier":{"PortValue":43204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355622,"nanos":434657745},"http":{"id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","method":"POST","headers":{":authority":"e2e-ipp-a-d722d0.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"]}}
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5c95fa810202"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4663233d-021d-45ef-90bd-cf7c7ad40ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2af3243d-956f-41ef-a3bd-f76497391fc6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-d722d0.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-d722d0/ipp-route-d722d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-d722d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ac8c64a-5a6b-4413-9cb7-0b879a5ed153","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43212","PortSpecifier":{"PortValue":43212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","method":"POST","path":"/ai-tenant-e2e-ipp-a-d722d0/ipp-route-d722d0/v1/chat/completions","host":"e2e-ipp-a-d722d0.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43212","PortSpecifier":{"PortValue":43212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785355624,"nanos":495053926},"http":{"id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","method":"POST","headers":{":authority":"e2e-ipp-a-d722d0.apps.7aa9a9f9-ee76-418e-b943-5c95fa810202.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-d722d0/ipp-route-d722d0/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bAo2tKbRwXimmsSM_ov5xydBsrKk9deUxMveuyvzGh35vTloUztvPfqlE26i"}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-d722d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bAo2tKbRwXimmsSM_ov5xydBsrKk9deUxMveuyvzGh35vTloUztvPfqlE26i\"}"}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-d722d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"915bc93c-cc4c-4b6c-b55e-9c48b0077960","keyName":"e2e-ipp-d722d0","subscription":"ipp-route-d722d0-sub","tenant":"e2e-ipp-a-d722d0","userId":"915bc93c-cc4c-4b6c-b55e-9c48b0077960","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-d722d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-d722d0/ipp-route-d722d0\",\"requestedSubscription\":\"ipp-route-d722d0-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-d722d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-d722d0/models/facebook/opt-125m","name":"ipp-route-d722d0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-d722d0-sub","namespace":"ai-tenant-e2e-ipp-a-d722d0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-d722d0/ipp-route-d722d0"}}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-d722d0/ipp-route-d722d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-d722d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-d722d0-sub"}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"915bc93c-cc4c-4b6c-b55e-9c48b0077960","keyName":"e2e-ipp-d722d0","selected_subscription":"ipp-route-d722d0-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-d722d0/ipp-route-d722d0-sub@ai-tenant-e2e-ipp-a-d722d0/ipp-route-d722d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-d722d0/models/facebook/opt-125m","name":"ipp-route-d722d0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-d722d0-sub","namespace":"ai-tenant-e2e-ipp-a-d722d0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-d722d0/ipp-route-d722d0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T20:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d26f8160-3233-4258-ac8d-7e94f65d6fa9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T20:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85f25e1161ad9a34744a5e3dc9a077c1a4866629b2c3a7ccf72bb501ea49b50c"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3faf6853884c09ce76d5f252daabc4cfa58761badf10b8988222d096a3ee48c6"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3c8c40ec265d8384cc9f7a134a91c4da3be846624f5322d04f781d15c3416d3"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39fc6ea8bd591674d5864929979c72257ab9fb57cd38fb304bd91b05aa2f354a"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21aea2c91f7b97cf5422bd8bc7c20cb696b0460e539d481d2bb9ac51cd32c06b"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/348395142273e6da5587742b534fc0b58624927e2ca0d0d09ae4954ed5429dd0"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ac53a41565203345179ff28f1b2603427089ca5b44498244d9331bc56a11bf3"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a02e6202fb12700e66b68f653c688b696748b4b32730fd2590e51530bd2b53ca"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be60b3fa4846205e8942853b0ab993d9626dddb06af4be3ba188e66be900c7b9"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/177629e00d7c6c11118addaa4d3edbdf0b9b280e58681d40152a2adb98fc0c8a"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e57313910280803601dfa07f43a2eae14bc3a6ccfafcbf466711e7d0376100e"}
{"level":"info","ts":"2026-07-29T20:08:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccaa2c2e36fc2f16cfc002b2e2135ff1d24cf05c62e9a76de67f2a5f96ea3a90"}